HP UX IPSec Software Requirements

Using Certificates with HP-UX IPSec

Overview

negotiation and each entity may get the other entity’s certificate from a CA or certificate directory service. The method used varies according to the CA used and the services provided by the CA.

Requirements

To use security certificates, your topology must meet the following requirements:

•The systems using certificates must use IPv4 addresses for IPSec. IKE digital signature authentication is not supported with IPv6 addresses.

•The security certificates must be administered using one of the following PKI products:

—VeriSign Managed PKI (formerly VeriSign OnSite for VPNs)

—Baltimore UniCERT 3.5 package

•All security certificates must be administered using a PKI product from the same vendor. When you configure HP-UX IPSec, you must configure only one PKI vendor for all security certificate operations.

Chapter 4 117