Contents

1   Description

This instruction describes how to create a trust category, which is a group of trusted certificates.

A trusted certificate can belong to multiple trust categories.

2   Procedure

2.1   Create Trust Category

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user has the System Security Administrator role.
  • An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

Steps

1. Navigate to the CertM Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1

2. Enter Config mode:

   (CertM=1)>configure

3. Create the TrustCategory MO, for example:

   (config-CertM=1)>TrustCategory=aurora

4. Set at least one TrustedCertificate MO reference, for example:

   (config-TrustCategory=aurora)>trustedCertificates=["ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1,TrustedCertificate=1","ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,CertM=1,TrustedCertificate=2"]

5. Commit the setting:

   (config-TrustCategory=aurora)>commit

6. Verify the committed trusted certificate reference in attribute trustedCertificates, for example:

   (TrustCategory=aurora)>show

   The following is an example output:

   TrustCategory=aurora trustedCertificates "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ CertM=1,TrustedCertificate=1" "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ CertM=1,TrustedCertificate=2"