R3204P16-HP Load Balancing Module Security Configuration Guide-6PW101

87
Figure 93 Add a PKI domain
• Type torsa as the PKI domain name.
• Type myca as the CA identifier.
• Select aaa as the local entity.
• Select CA as the authority for certificate request.
• Type http://4.4.4.133:446/c95e970f632d27be5e8cbf80e971d9c4a9a93337 as the URL for
certificate request. The URL must be in the format of http://host:port/Issuing Jurisdiction ID, where
Issuing Jurisdiction ID is a hexadecimal string generated on the CA.
• Select Manual as the certificate request mode.
• Click the expansion button before Advanced Configuration to display the advanced configuration
items.
• Select the Enable CRL Checking check box.
• Type http://4.4.4.133:447/myca.crl as the CRL URL.
• Click Apply. When the system displays “Fingerprint of the root certificate not specified. No root
certificate validation will occur. Continue?”, click OK to confirm.
# Generate an RSA key pair.
• Select Security > PKI > Certificate from the navigation tree and then click Create Key to perform the
configurations shown in Figure 94.