H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 624)

603
Retrieving and displaying a certificate
You can download an existing CA certificate or local certificate from the CA server, and save it locally.
To do so, you can use offline mode or online mode. In offline mode, you can retrieve a certificate by an
out-of-band means like FTP, disk, email and then import it into the local PKI system.
The retrieved CA certificate and local certificate are saved as files named domain-name_ca.cer and
domain-name_local.cer in the root directory, respectively.
To retrieve a certificate:
1. From the navigation tree, select Authentication > Certificate Management.
2. Click the Certificate tab.
3. Click Retrieve Cert to enter PKI certificate retrieval page.
Figure 632 PKI certificate retrieval page
4. Configure the parameters as described in Table 192 .
5. Click Apply.
Table 192 Configuration items
Item Description
Domain Name Select the PKI domain for the certificate.
Certificate Type Select the type of the certificate to be retrieved: CA or Local.
Enable Offline
Mode Select this option to retrieve a certificate by an out-of-band means like FTP, disk, or
email, and then import the certificate into the local PKI system.
Get File From Device
Get File From PC
Specify the path and name of the certificate file if you retrieve the certificate in offline
mode.
• If the certificate file is saved on the device, select Get File From Device, and then
specify the path of the file on the device. If you do not specify the file path, the system
uses the CA certificate file named domain-name_ca.cer or local certificate file
named domain-name_local.cer in the root directory of the device.
• If the certificate file is saved on a local PC, select Get File From PC and then specify
the path to the file and select the partition of the device for saving the file.
Password
Enter the password for protecting the private key if you retrieve the certificate in offline
mode. The password was specified when the certificate was exported.
6. After you retrieve a certificate, click View Cert corresponding to the certificate from the PKI
certificates list to display the contents of the certificate.