Contents

1   Introduction

This document describes how to create a trust category, which is a group of trusted certificates.

A trusted certificate can belong to multiple trust categories.

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has the System Security Administrator role.
• An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

2   Procedure

To create a trust category:

1. Navigate to the CertM Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1

2. Enter Config mode:

   (CertM=1)>configure

3. Create the TrustCategory MO, for example:

   (config-CertM=1)>TrustCategory=aurora

4. Set at least one TrustedCertificate MO reference, for example:

   (config-TrustCategory=aurora)>trustedCertificates=["ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1,TrustedCertificate=1","ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1,TrustedCertificate=2"]

5. Commit the setting:

   (config-TrustCategory=aurora)>commit

6. Verify the committed trusted certificate reference in attribute trustedCertificates, for example:

   (TrustCategory=aurora)>show

   The following is an example output:

   TrustCategory=aurora trustedCertificates "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ CertM=1,TrustedCertificate=1" "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ CertM=1,TrustedCertificate=2"