Cisco Cisco Identity Services Engine 1.2 产品宣传页

 

 
 

Cisco Systems © 2015 

8 페이지  

보안

 액세스 방법 가이드 

자체

 서명 pxGrid 클라이언트 인증서 

이

 섹션에서는 pxGrid 클라이언트에서 자체 서명 인증서를 생성하는 프로세스를 자세히 살펴봅니다. pxGrid 

퍼블릭

/프라이빗 키 쌍이 생성되면 프라이빗 키(예: self1.key)에서 PKCS 12 파일(self1.p12)이 생성됩니다. 

이

 PKCS 12 파일은 대상 또는 ID 키 저장소(예: self1.jks)에 가져오기 되며, 이러한 저장소는 pxGrid 스크립트의 

keystoreFilename 및 keystorePassword 역할을 합니다. ISE ID 인증서 및 퍼블릭 인증서도 모두 이 키 저장소에 
추가됩니다

. 

ISE ID 인증서는 truststoreFilename 및 truststorePassword 역할을 하는 트러스트 키 저장소(예: root1.jks)에도 
추가됩니다

. 

1단계 

pxGrid 클라이언트에 대한 프라이빗 키(예: self1.key)를 생성합니다. 

 

Generating RSA private key, 4096 bit long modulus 

..................++ 

.............................++ 

e is 65537 (0x10001) 

2단계 

자체

 서명 CSR(self1.csr) 요청을 생성하고 챌린지 비밀번호를 제공합니다. 

 

You are about to be asked to enter information that will be incorporated 

into your certificate request. 

What you are about to enter is what is called a Distinguished Name or a DN. 

There are quite a few fields but you can leave some blank 

For some fields there will be a default value, 

If you enter '.', the field will be left blank. 

----- 

Country Name (2 letter code) [AU]: 

State or Province Name (full name) [Some-State]: 

Locality Name (eg, city) []: 

Organization Name (eg, company) [Internet Widgits Pty Ltd]: 

Organizational Unit Name (eg, section) []: 

Common Name (e.g. server FQDN or YOUR name) []: 

Email Address []: 

Please enter the following 'extra' attributes 

to be sent with your certificate request 

A challenge password []:cisco123 

An optional company name []:LAB 

 

참고

: 유지 관리의 용이성을 높이고 오류를 줄이려면 이 문서 전체에서 같은 비밀번호를 사용하십시오. 

3단계 

자체

 서명 퍼블릭 키 쌍 인증서(예: self1.cer)를 생성합니다.