Configuring Response Protection

Procedure

1. Choose System > About > Certificate Authority Service from the main menu.
2. Choose Protocol Configuration > CMP from the navigation tree on the left.
3. On the Responder Configuration tab page, click Add. On the Add Responder Configuration page, set required parameters.
   For detailed parameter descriptions, see Table 1.

   Table 1 Response protection parameters

   Parameter			Description	Value
   Label			Name of a response protection certificate.	The value can contain only digits, letters, underscores (_), and hyphens (-), but cannot be null or all (case-insensitive).
   Certificate configuration mode	New self-signed certificate		If no response verification certificate is available, you can use this method to generate a self-signed certificate using the Certificate Authority Service, and the private key of this certificate is used to sign the response. Once downloaded, this certificate can be used to verify the integrity of the CMP response. In this mode, you need to select the root CA certificate profile, signature algorithm, and associated CA.	N/A
   	Upload certificate file		If a response signature certificate is obtained, you can use this method to import the certificate and private key to the Certificate Authority Service. The Certificate Authority Service uses the private key to sign the response, and you can use the certificate to verify the integrity of the response. In this mode, you need to upload a certificate file, enter the password of the matching certificate, and select the signature algorithm and associated CA.	The certificate file to be uploaded must be in .p12 format. Only one file can be uploaded and the file size cannot exceed 20 KB. The certificate file name is a string of 1 to 256 characters containing Chinese characters, digits, letters, underscores (_), and hyphens (-), spaces, dots (.) and round brackets. It cannot start with a dots (.) or space.

4. Click Submit.

Related Tasks

• Viewing response protection information

  Choose Protocol Configuration > CMP. On the Responder Configuration tab page, click a response protection name. On the page that is displayed, you can view the detailed information.

• Searching for response protection information

  Choose Protocol Configuration > CMP. On the Responder Configuration tab page, enter a response protection name in the name search box and click to find the specified response protection and view the details. The Certificate Authority Service supports fuzzy search by response protection name.

• Modifying response protection information

  Choose Protocol Configuration > CMP. On the Responder Configuration tab page, click Modify corresponding to the desired response protection. On the page that is displayed, modify response protection information.

  

  The response protection name cannot be changed.

• Deleting response protection

  Choose Protocol Configuration > CMP. On the Responder Configuration tab page, click Delete corresponding to the desired response protection.

• Downloading a response protection certificate

  Choose Protocol Configuration > CMP. On the Responder Configuration tab page, click Download corresponding to the desired response protection to download the response protection certificate.

  

  The downloaded response protection certificate file is in .pem format.