Contents

1   Description

This instruction describes how to configure the Trust Category for ECLI, NETCONF, or FTP over TLS.

2   Procedure

2.1   Configure Trust Category for ECLI

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • An Ericsson Command-Line Interface (ECLI) in exec mode is in progress.
  • A known TrustCategory Managed Object (MO) exists; in these examples, TrustCategory=1 is used.

Steps

1. Navigate to the CliTls MO, for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,CliTls=1

2. Enter Config mode:

   (CliTls=1)>configure

3. Set the reference to the applicable TrustCategory MO, for example:

   (config-CliTls=1)>trustCategory="ManagedElement=1,SystemFunctions=1,SecM=1,CertM=1,TrustCategory=1"

4. Commit the settings:

   (config-CliTls=1)>commit

5. Verify the settings:

   (CliTls=1)>show

   The following is an example output:

   CliTls=1 [...] trustCategory="ManagedElement=1,SystemFunctions=1,⇒ SecM=1,CertM=1,TrustCategory=1"

2.2   Configure Trust Category for NETCONF

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • An Ericsson Command-Line Interface (ECLI) in exec mode is in progress.
  • A known TrustCategory Managed Object (MO) exists; in these examples, TrustCategory=1 is used.

Steps

1. Navigate to the NetconfTls MO, for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,NetconfTls=1

2. Enter Config mode:

   (NetconfTls=1)>configure

3. Set the reference to the applicable TrustCategory MO, for example:

   (config-NetconfTls=1)>trustCategory="ManagedElement=1,SystemFunctions=1,SecM=1,CertM=1,TrustCategory=1"

4. Commit the settings:

   (config-NetconfTls=1)>commit

5. Verify the settings:

   (NetconfTls=1)>show

   The following is an example output:

   NetconfTls=1 [...] trustCategory="ManagedElement=1,SystemFunctions=1,⇒ SecM=1,CertM=1,TrustCategory=1"

2.3   Configure Trust Category for FTP

Steps

1. Navigate to the FtpTlsServer MO, for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,FileTPM=1,FtpServer=1,FtpTlsServer=1

2. Enter Config mode:

   (FtpTlsServer=1)>configure

3. Set the reference to the applicable TrustCategory MO, for example:

   (config-FtpTlsServer=1)>trustCategory="ManagedElement=1,SystemFunctions=1,SecM=1,CertM=1,TrustCategory=1"

4. Commit the settings:

   (config-FtpTlsServer=1)>commit

5. Verify the settings:

   (FtpTlsServer=1)>show

   The following is an example output:

   FtpTlsServer=1 [...] trustCategory="ManagedElement=1,SystemFunctions=1,⇒ SecM=1,CertM=1,TrustCategory=1"