Dell 6.2 Configuring the Co ntroller as an OCSP Respond er

231| Cer tificateRe vocation DellPowerConnect W- Series ArubaOS 6.2 | User Guide
In the WebUI
1. N avigate to the Configuration > Management > Certificates > Upload page.
2. E nter a name in the Certificate Name field. This name identifies the CRL certificate yo u areuploading.
3. E ntert hecerti ficate file namein the Certif icate Filenamefield. Use the Br owse button to enter the full
pathname.
4. Select the certificate format from the Certificate Format drop-down menu.
5. Select CRL from the Certificate Type drop-down menu.
NOTE:A revocation check method (OCSP or CRL) can be chosen independently for every revocation checkpoint. In thisexampl e, we
areonl y describing the CRL check method.
Oncet his CRL is uploaded it is mai ntained in the store for CRLs. These CRLs are used for signature
verification.
6. Click Upload. The CRL appears in the Certific ate Lists pane. Select CRL from the Group drop-downlist if you
want to display only CRLs.
7. Fo r detailed information about an uploadedCR L, click View nextt o the CRL.
8. Select the Revocation Checkpoint tab.
9. I n the Revocation Checkpoint pane,click Edit next to the revocation checkpoint that you want to configure.
The Revocation Checkpointpane displays.
10. In the Revocation Check field,select cr l fromthe Method 1 drop-down list.
11. In the CRL Location field,enter the CR L you want used for this revocation checkpoint. The CRLs listed are
files that have alreadybeen imported onto the controller.
12. Click Apply.
In the CLI
This exampleconfigures an OCSP responder with the check method as CRL for revocation check point R OOTCa-
ssh-webui.The CRL locatio ni s crl1and the revocation check method is crl.
(host) (config) #crypto-local pki rcp ROOTCa-ssh-webui
(host) (RCP-CARoot) #crl-location file crl1
(host) (RCP-CARoot) #revocation-check crl
Configuring the Co ntroller as an OCSP Respond er
Whenconfigured as an OCSP responder, the controller provides revocation status information to A rubaOS
applications that are using CRLs.
In the WebUI
1. N avigate to the Configuration > Management > Certificates > Upload page.
2. E nter a name in the Certificate Name field. This name identifies the OCSP signer certificate you are uploading.
3. E ntert hecerti ficate file namein the Certif icate Filenamefield. Use the Br owse button to enter the full
pathname.
4. Select the certificate format from the Certificate Format drop-down menu.
5. Select OCSP signer cert from the Certificate Type drop-down menu.Once this certificat e is uploaded it is
maintained in the certificate store for OCSP signer certificates. These certificat es are used for signature
verification.