12.7.3 Exporting a Certificate
To provide a certificate for another device, export the certificate.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
pki export-certificate { ca | local | ocsp } pki-realm-name { der | pkcs12 | pem }
The certificate is exported and saved in a file.
----End
12.7.4 Configuring the Default Path Where Certificates Are Stored
You can configure the default path where certificate files are stored.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
pki credential-storage local-dir
The default path and directory where the CA certificate, local certificate, and private key are
stored are configured.
By default, the CA certificate, local certificate, and private key are stored in flash:/.
----End
12.8 Configuration Examples
12.8.1 Example for Configuring Manual Certificate Enrollment
Networking Requirements
This section describes how to configure a PKI entity (a router) to request a local certificate from
a CA.
Figure 12-3 Configuring a PKI entity to request a certificate from a CA
Internet
Internet
PKI entity
CARouter
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 12 PKI Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
251
To Next Page
Loading...
Need help?
General
