HP Cisco MDS 9020 Cisco MDS 9000 Family Fabric Manager Configuration Guide, Re - Page 813

Send documentation comments to [email protected] 43 C H A P T E R Configuring Certificate Authorities and Digital Certificates Public Key Infrastructure (PKI) support provides the means for the Cisco MDS 9000 Family switches to obtain and use digital certificates for secure communication in the network. PKI support provides manageability and scalability for IPsec/IKE and SSH. This chapter includes the following sections: • About CAs and Digital Certificates, page 43-1 • Configuring CAs and Digital Certificates, page 43-6 • Example Configurations, page 43-17 • Maximum Limits, page 43-36 • Default Settings, page 43-37 About CAs and Digital Certificates This section provides information about certificate authorities (CAs) and digital certificates, and includes the following topics: • Purpose of CAs and Digital Certificates, page 43-2 • Trust Model, Trust Points, and Identity CAs, page 43-2 • RSA Key-Pairs and Identity Certificates, page 43-2 • Multiple Trusted CA Support, page 43-3 • PKI Enrollment Support, page 43-4 • Manual Enrollment Using Cut-and-Paste Method, page 43-4 • Multiple RSA Key-Pair and Identity CA Support, page 43-4 • Peer Certificate Verification, page 43-5 • CRL Downloading, Caching, and Checking Support, page 43-5 • OCSP Support, page 43-5 • Import and Export Support for Certificates and Associated Key Pairs, page 43-5 OL-16184-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family CLI Configuration Guide 43-1