Contents

1   Introduction

This document describes how to change a trust category.

A trusted certificate can belong to multiple trust categories. TrustedCertificate Managed Object (MO) references can be deleted from a TrustCategory MO if more than one TrustedCertificate MO reference exists.

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has the System Security Administrator role.
• MO TrustCategory exists.
• MO TrustCategory includes at least two TrustedCertificate references.
• An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

2   Procedure

To change a trust category:

1. Navigate to the TrustCategory MO, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1,TrustCategory=aurora

2. List the trusted certificates:

   (TrustCategory=aurora)>show

   The following is an example output:

   TrustCategory=aurora trustedCertificates "ManagedElement=NODE06ST,SystemFunctions=1,⇒ SecM=1,CertM=1,TrustedCertificate=1" "ManagedElement=NODE06ST,SystemFunctions=1,⇒ SecM=1,CertM=1,TrustedCertificate=2"

3. Enter Config mode:

   (TrustCategory=aurora)>configure

4. Delete the unwanted TrustedCertificate MO reference, for example:

   (config-TrustCategory=aurora)>no trustedCertificates="ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1,TrustedCertificate=2"

5. Commit the change:

   (config-TrustCategory=aurora)>commit

6. Verify the change:

   (TrustCategory=aurora)>show

   The following is an example output:

   TrustCategory=aurora trustedCertificates "ManagedElement=NODE06ST,SystemFunctions=1,⇒ SecM=1,CertM=1,TrustedCertificate=1"