R3303-HP 6600/HSR6600 Routers Security Configuration Guide

373
Figure 134 Requesting a certificate
3. Configure the parameters as described in Table 19.
Table 16 Configuration items
Item Descri
p
tion
Domain Name Select the PKI domain for the certificate.
Password Enter the password for certificate revocation.
Enable Offline
Mode
Select this box to request a certificate in offline mode, that is, by an out-of-band means
like FTP, disk, or email.
If you cannot request a certificate from the CA through the SCEP protocol, you can enable
the offline mode. In this case, after clicking Apply, the offline certificate request
information page appears, as shown in Figure 135. Submit th
e information to the CA to
request a local certificate.
4. Click Apply.
If you request the certificate in online mode, the system displays "Certificate request has been
submitted." Click OK to confirm. If you request the certificate in offline mode, the system displays
the offline certificate request information. You can submit the information to the CA by an
out-of-band means.
Figure 135 Offline certificate request information
Retrieving and displaying a CRL
1. From the navigation tree, select Authentication > Certificate Management > CRL.