HP Cisco MDS 9134 Cisco MDS 9000 Family Fabric Manager Configuration Guide, Re - Page 820

Configuring CAs and Digital Certificates Chapter 43 Configuring Certificate Authorities and Digital Certificates Send documentation comments to [email protected] Step 8 Click Create to create the RSA Key-Pair. Creating a Trust Point CA Association To create a trust point CA association using Fabric Manager, follow these steps: Step 1 Step 2 Expand Switches > Security then select PKI in the Physical Attributes pane. Click the Trust Point tab in the Information Pane. You see the information shown in Figure 43-3. Figure 43-3 Trust Point Tab Step 3 Click Create Row. You see the Create Trust Point dialog box shown in Figure 43-4. Figure 43-4 Create Trust Point Dialog Box Step 4 Step 5 Step 6 Step 7 Step 8 Select the switch for which you are creating the trust point CA from the Switch drop-down menu. Assign a name to the trust point CA. Select a key-pair name to be associated with this trust point for enrollment. It was generated earlier in the "Generating an RSA Key-Pair" section on page 43-6. Only one RSA key-pair can be specified per CA. From the RevokeCheckMethod drop-down menu, select the certificate revocation method that you would like to use (see Figure 43-4). You can use CRL, OCSP, CRL OCSP, or OCSP CRL to check for certificate revocation. The CRL OCSP option checks for revoked certificates first in the locally stored CRL. If not found, the switch uses OCSP to check the revoked certificates on the URL specified in Step 7. Enter the OCSP URL if you selected an OCSP certificate revocation method. 43-8 Cisco MDS 9000 Family CLI Configuration Guide OL-16184-01, Cisco MDS SAN-OS Release 3.x