cmp-request message-authentication-code

Function

The cmp-request message-authentication-code command configures the reference value and secret value of the message authentication code (MAC).

The undo cmp-request message-authentication-code command deletes the reference value and secret value of the MAC.

By default, the reference value and secret value of the MAC are not configured.

Format

cmp-request message-authentication-code reference-value secret-value

undo cmp-request message-authentication-code

Parameters

Parameter	Description	Value
reference-value	Specifies the reference value of the MAC.	The value is a string of 1 to 128 case-sensitive characters without spaces and question marks. If the character string is enclosed in double quotation marks, it can contain spaces.
secret-value	Specifies the secret value of the MAC.	The length of the plaintext ranges from 1 to 128. The length of the encrypted ciphertext ranges from 48 to 188. The value is a case-sensitive character string without question marks.

Views

CMP session view

Default Level

2: Configuration level

Usage Guidelines

When a device is configured to use MAC for initial request (IR), you need to check the reference value and secret value of the MAC from the CMPv2 server in out-of-band mode, and then run this command to set the values on the device.

Example

# Configure the reference value and secret value of the MAC.

<HUAWEI> system-view
[HUAWEI] pki cmp session test
[HUAWEI-pki-cmp-session-test] cmp-request message-authentication-code 1234 123456