214
PKI configuration commands
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see
Security Configuration Guide
.
attribute
Syntax
attribute
id
{
alt-subject-name
{
fqdn
|
ip
} | {
issuer-name
|
subject-name
} {
dn
|
fqdn
|
ip
} } {
ctn
|
equ
|
nctn
|
nequ
}
attribute-value
undo attribute
{
id
|
all
}
View
Certificate attribute group view
Default level
2: System level
Parameters
id
: Specifies an ID for the certificate attribute rule, in the range 1 to 16.
alt-subject-name
: Specifies the name of the alternative certificate subject.
fqdn
: Specifies the FQDN of the entity.
ip
: Specifies the IP address of the entity.
issuer-name
: Specifies the name of the certificate issuer.
subject-name
: Specifies the name of the certificate subject.
dn
: Specifies the distinguished name of the entity.
ctn
: Specifies the contain operation.
equ
: Specifies the equal operation.
nctn
: Specifies the not-contain operation.
nequ
: Specifies the not-equal operation.
attribute-value
: Specifies the value of the certificate attribute, a case-insensitive string of 1 to 128
characters.
all
: Specifies all certificate attributes.
Description
Use the
attribute
command to configure the attribute rules of the certificate issuer name, certificate
subject name and alternative certificate subject name.
Use the
undo attribute
command to delete the attribute rules of one or all certificates.
By default, there is no restriction on the issuer name, subject name, and alternative subject name of a
certificate.
