HP VPN Firewall Appliances VPN Configuration Guide

271
Figure 187 CRL information
Certificate request from a Windows 2003 CA server
configuration example
Network requirements
As shown in Figure 188, configure the fireall to work as the PKI entity, so that:
• The firewall submits a local certificate request to the CA server, which runs Windows 2003 server
operating system.
• The firewall retrieves CRLs for certificate verification.
Figure 188 Network diagram
Configuring the CA server
1. Install the CA server component:
a. Select Control Panel > Add or Remove Programs from the start menu.
b. Select Add/Remove Windows Components.
c. Select Certificate Services in the pop-up dialog box.