3D Innovations 3.0.1 appendix Working with PKI Enrollment Objects, C-140, Attributes

Appendix B Site-to-Site VPN User Interface Reference

Site to Site VPN Policies

		Related Topics
		• Configuring Public Key Infrastructure Policies, page 9-84
		• Working with PKI Enrollment Objects, page 8-153
		Field Reference
Table B-20	Public Key Infrastructure (PKI) Page
Element			Description
Available CA Servers			Lists the predefined CA servers available for selection.
			CA servers are predefined PKI enrollment objects that contain
			server information and enrollment parameters that are required for
			creating enrollment requests for CA certificates.
			Select the required CA server if you want to replace the default one
			in the Selected field.
			If the required CA server is not included in the list, click Create to
			open a dialog box that enables you to create or edit a PKI enrollment
			object. For more information, see PKI Enrollment Dialog Box,
			page C-140.
			Note If you are making a PKI enrollment request on an Easy VPN
			remote access system, you must configure each remote
			component (spoke) with the name of the user group to which
			it connects. You specify this information in the Organization
			Unit (OU) field in the Certificate Subject Name tab of the
			PKI Enrollment Editor dialog box. You do not need to
			configure the name of the user group on the hub (Easy VPN
			Server). For more information, see Defining Additional PKI
			Attributes, page 8-162.
Selected			The selected CA server.
			Note You cannot edit the selected CA server because it is a
			predefined object. You can only edit the properties of an
			object you define.
			To remove the selected CA server, select a different one.

	User Guide for Cisco Security Manager 3.0.1
B-58	OL-8214-02