Auto Certificate Issuing

Precautions

Before initiating a certificate update request in a scenario, ensure that the Auto Certificate Issuing function has been enabled for both the system and the scenario.

Procedure

1. Choose Settings > Certificate > Auto Certificate Issuing.
2. Enable Auto Certificate Issuing and configure parameters.
   

   After Auto Certificate Issuing is disabled, the system does not initiate automatic certificate update requests.

3. Click Modify to modify the configuration information.
   

   This operation is required if Auto Certificate Issuing is not enabled for the first time.

4. Set Days Before Auto Update. When the number of days that a certificate is about to expire reaches the value of this parameter, the system automatically triggers a certificate update.
5. Configure the CA server that issues certificates. Table 1 describes related parameters.

   Table 1 CA server parameters

   Parameter	Description
   IP Address	Indicates the IP address of the CA server. IPv4 and IPv6 addresses are supported.
   Port	Indicates the port number of the CA server.
   Path	Indicates the path of the CA server.

6. Import the CA server certificate. Import Certificate File, CA Certificate File, and Private Key File.
   

   If a CA server certificate has been imported, you can select Import New Certificate to import a new one.

7. If a CA server certificate has been imported, determine whether to change the private key encryption password of the certificate. If you need to change the password, select Modify Private Key Encryption Password and specify New Private Key Encryption Password and Confirm Password.
8. Click Save.