3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

PKI Domain Configuration Commands 431
pki domain Syntax
pki domain name
undo pki domain name
View
System view
Parameter
name: PKI domain name specified for the quotation of other commands,
indicating the PKI domain to which this device belongs. It can contain one
character to 15 characters.
Description
Use the pki domain command to enter PKI domain view, where you can
configure the parameters of LDAP servers and for certificate request and
authentication.
Use the undo pki domain command to delete the specified PKI domain.
By default, no PKI domain name is specified.
Example
# Enter PKI domain view.
[SecBlade_VPN] pki domain 1
[SecBlade_VPN-pki-domain-1]
root-certificate
fingerprint
Syntax
root-certificate fingerprint { md5 | sha1 } string
undo root-certificate fingerprint
View
PKI domain view
Parameter
md5: Uses MD5 fingerprint.
sha1: Uses SHA1 fingerprint.
string: Fingerprint to be used. If the MD5 fingerprint is selected, the string
argument must have 32 characters and be input in hexadecimal format. If the
SHA1 fingerprint is selected, the string argument must have 40 characters and be
input in hexadecimal format.
Description
Use the root-certificate fingerprint command to configure the footprint used
for authenticating the CA root certificate.
Use the undo root-certificate fingerprint command to cancel the configured
fingerprint.