R0106-HP MSR Router Series Security Command Reference(V7)

253
Table 32 Command output
Field Description
Total PKI certificate access control
policies
Total number of certificate access control policies.
permit
If the attributes of a certificate match the attribute rules defined in the
attribute group that the policy references, the certificate passes the
check and is regarded valid.
deny
If the attributes of a certificate match the attribute rules defined in the
attribute group that the policy references, the certificate fails the check
and is regarded invalid.
Related commands
• pki certificate access-control-policy
• rule
display pki certificate attribute-group
Use display pki certificate attribute-group to display information about certificate attribute groups.
Syntax
display pki certificate attribute-group [ group-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group-name: Specifies the name of a certificate attribute group, a case-insensitive string of 1 to 31
characters.
Usage guidelines
If no certificate attribute group is specified, this command displays information about all certificate
attribute groups.
Examples
# Display information about the certificate attribute group mygroup.
<Sysname> display pki certificate attribute-group mygroup
Attribute group name: mygroup
Attribute 1 subject-name dn ctn abc
Attribute 2 issuer-name fqdn nctn app
# Display information about all certificate attribute groups.
<Sysname> display pki certificate attribute-group
Total PKI certificate attribute groups: 2.
Attribute group name: mygroup1
Attribute 1 subject-name dn ctn abc