The PKI configuration model file is huawei-pki.yang.
Object |
Description |
Value Range |
Remarks |
|---|---|---|---|
/huawei-pki:certificate-operation |
Imports certificates. It is a root object, which is only used to contain sub-objects, but does not have any data meaning. |
- |
NA |
/huawei-pki:certificate-operation/files/realm-name |
PKI realm name. Only the default realm is supported. |
- |
|
/huawei-pki:certificate-operation/files/certificate-type |
Certificate type. Only CA and local certificates are supported. |
- |
|
/huawei-pki:certificate-operation/files/file-name |
Certificate file name. |
The value is a string of 1 to 64 case-insensitive characters without spaces or question marks (?). |
|
/huawei-pki:certificate-operation/files/file-format |
Certificate format. Only the PEM format is supported. |
- |
|
/huawei-pki:certificate-operation/files/operation-type |
Certificate operation type. Only the import operation is supported. |
- |
|
/huawei-pki:certificate-operation/files/password |
The password is required only for certificate import. |
The value is a string of 6 to 32 case-sensitive characters without question marks (?). |
|
/huawei-pki:certificate-operation/files/vsys-name |
Name of a VS. If the root system is used, the name is public. |
- |
|
/huawei-pki:certificate-operation/files/slot-id |
Slot ID. |
- |
|
/huawei-pki:certificate-replace |
Replaces certificates. It is a root object, which is only used to contain sub-objects, but does not have any data meaning. |
- |
|
/huawei-pki:certificate-replace/files/realm-name |
PKI realm name. Only the default realm is supported. |
- |
|
/huawei-pki:certificate-replace/files/certificate-type |
Certificate type. Only CA and local certificates are supported. |
- |
|
/huawei-pki:certificate-replace/files/file-name |
Certificate file name. Only the PEM format is supported. |
The value is a string of 1 to 64 case-insensitive characters without spaces or question marks (?). |
|
/huawei-pki:certificate-replace/files/slot-id |
Slot ID. |
- |
|
/huawei-pki:certificate-adoption/realms/certificate-expire-warning/start-timestamp |
Configures the expiry warning time of the local certificate and CA certificate stored to the device memory. |
The value is an integer that ranges from 7 to 180. The default value is 7. |
|
/huawei-pki:certificate-status-notification |
Reports an alarm when the certificate reaches the expiry time. |
- |