Licensing Requirements and Limitations for PKI

Involved Network Elements

In the CloudCampus Solution, PKI involves the following network elements:

• PKI authentication center (including CA server and certificate/CRL storage server)
• SSH client (such as switch)
• SSH server (Third-party NMSs supporting the NETCONF over SSH mode or iMaster NCE-Campus)

Licensing Requirements

PKI is a basic feature of a switch and is not under license control.

Feature Support in V200R019C10

All models of S2720, S5700, and S6700 series switches support PKI.

For details about software mappings, visit Hardware Query Tool and search for the desired product model.

Feature Limitations

In V200R011C10 and later versions, in a stack, the standby device does not support automatic backup of the RSA key pair of the master device. During a master/standby switchover, the standby device cannot back up the rsa local-key-pair key-name command in the PKI realm of the master device. Therefore, you need to manually create an RSA key pair on the standby/slave device.