Using Certificates with HP-UX IPSec

Using VeriSign Certificates

3.The local Managed PKI Administrator uses a web browser to visit the Managed PKI Control Center website and approve the certificate request. This sends an Approve Request message to the Managed

PKI CA.

4.The IPSec administrator requests ipsec_mgr to check on the certificate request. The ipsec_mgr program sends a message to the Managed PKI Control Center to retrieve the certificate.

5.The Managed PKI CA sends the certificate to ipsec_mgr. The ipsec_mgr program stores the certificate and associated information in files for HP-UX IPSec to use.

Figure 4-1

VeriSign PKI Data Flow

 

 

VeriSign Certificate Tasks

 

 

To use VeriSign certificates, you must complete the following tasks:

Step

1.

Complete and verify the prerequisite requirements.

Step

2.

Configure web proxy server parameters if you will use a web proxy to

 

 

access the VeriSign Managed PKI Control Center. You must do this on

 

 

each HP-UX IPSec system using VeriSign certificates.

Step

3.

Register the Managed PKI Administrator. You only need to do this once,

 

 

regardless of the number of IPSec systems using VeriSign certificates.

Chapter 4

119