H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 394)

381
Figure 376 Configure a PKI entity
2. Create a PKI domain.
a. Click the Domain tab.
b. Click Add.
c. Enter torsa as the PKI domain name.
d. Enter myca as the CA identifier.
e. Select aaa as the local entity.
f. Select CA as the authority for certificate request.
g. Enter http://4.4.4.133:446/c95e970f632d27be5e8cbf80e971d9c4a9a93337 as the URL for
certificate request. The URL must be in the format of http://host:port/Issuing Jurisdiction ID,
where Issuing Jurisdiction ID is the hexadecimal string generated on the CA.
h. Select Manual as the certificate request mode.
i. Click the collapse button for the Advanced Configuration option.
j. Click the Enable CRL Checking box.
k. Enter http://4.4.4.133:447/myca.crl as the CRL URL.
l. Click Apply.
A dialog box appears, asking "Fingerprint of the root certificate not specified. No root
certificate validation will occur. Continue?"
m. Click OK.