HP-UX IPSec version A.02.00 Administrator's Guide

Using Certificates with HP-UX IPSec
Using Baltimore Certificates
Chapter 4126
Using Baltimore Certificates
If you are using the Baltimore CA for authentication with IPSec, you
must first purchase the Baltimore UniCERT 3.5 package. For more
information about any of the prerequisites below, see the documentation
you received from Baltimore.
Baltimore Certificate Tasks
To use Baltimore certificates, you must complete the following tasks:
Step 1. Complete and verify the prerequisite requirements.
Step 2. Request a Baltimore certificate from the Baltimore CA Administrator
and transfer the certificate file to the HP-UX IPSec system. You must do
this for each HP-UX IPSec system using Baltimore certificates.
Step 3. Configure the Baltimore certificate on the HP-UX IPSec system using
ipsec_mgr. The ipsec_mgr program will extract information from the
certificate file for IPSec.
Step 4. Configure authentication records with IKE IDs. This task is described in
“Configuring Authentication Records with IKE IDs” on page 134.
Step 5. Configure your system to automatically retrieve the Certificate
Revocation List (CRL), or manually retrieve the CRL. This task is
described in “Retrieving the Certificate Revocation List (CRL)” on
page 142.
Step 1: Verifying Prerequisites
NOTE All HP-UX IPSec systems using Baltimore certificates must have IPv4
addresses.
Before you request Baltimore certificates for IPSec systems, you must:
1. Make sure all components of the Baltimore CA are installed and
available. See your Baltimore documentation for installation and
configuration instructions.