480
Predefined user roles
network-admin
Parameters
domain-name: Specifies a PKI domain name, a case-insensitive string of 1 to 31 characters. The
domain name cannot contain the special characters listed in Table 69.
Table 69 Special characters
Tilde ~ Dot .
Asterisk * Left angle bracket <
Backslash \ Right angle bracket >
Vertical bar | Quotation marks "
Colon : Apostrophe '
Usage guidelines
When you remove a PKI domain, the certificates and the CRL in the domain are also removed.
Examples
# Create a PKI domain named aaa and enter its view.
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa]
pki entity
Use pki entity to create a PKI entity and enter its view, or enter the view of an existing PKI entity.
Use undo pki entity to remove a PKI entity.
Syntax
pki entity entity-name
undo pki entity entity-name
Default
No PKI entities exist.
Views
System view
Predefined user roles
network-admin
Parameters
entity-name: Specifies a name for a PKI entity, a case-insensitive string of 1 to 31 characters.
Usage guidelines
A PKI entity includes the identity information that can be used by a CA to identify a certificate
applicant. You can configure multiple attributes for a PKI entity, such as common name, organization,
organization unit, locality, state, country, FQDN, and IP address. The information will be included as
subject contents in the certificate issued by the CA.