R2511-HP MSR Router Series Security Command Reference(V5)

311
Usage guidelines
After an applicant makes a certificate request, the CA might need a long period of time if it verifies the
certificate request manually. During this period, the applicant needs to query the status of the request
periodically to get the certificate as soon as possible after the certificate is signed.
Examples
# Specify the polling interval as 15 minutes and the maximum number of attempts as 40.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] certificate request polling interval 15
[Sysname-pki-domain-1] certificate request polling count 40
Related commands
display pki certificate
certificate request url
Use certificate request url to specify the URL of the server for certificate request through SCEP.
Use undo certificate request url to remove the configuration.
Syntax
certificate request url url-string
undo certificate request url
Default
No URL is specified for a PKI domain.
Views
PKI domain view
Default command level
2: System level
Parameters
url-string: Specifies the URL of the registration server for certificate request, a case-insensitive string of 1
to 127 characters. It comprises the location of the server and the location of CGI command interface
script in the format of http://server_location/ca_script_location, where server_location must be an IP
address and does not support domain name resolution.
Examples
# Specify the URL of the server for certificate request.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] certificate request url
http://169.254.0.100/certsrv/mscep/mscep.dll
common-name
Use common-name to configure the common name of an entity, which can be, for example, the user
name.