In whitelist-based IPsec certificate authentication scenarios, after a user runs the pki whitelist command to add or delete whitelist data, the modification does not take effect until the pki whitelist update command is executed.
Example
# Update all the modified whitelist data.
<HUAWEI> system-view
[~HUAWEI] pki whitelist update all