[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

PKI Support on Different Device Types

The following table lists PKI features, specifies whether the features are supported on various device types, and indicates where you can find more information about each feature.

Table 67: Support Information: PKI

Feature

J-series Services Routers

SRX-series Services Gateways

More Information

Internet Key Exchange (IKE) support

Yes

Yes

Internet Key Exchange

Entrust, Microsoft, and Verisign certificate authorities (CAs)

Yes

Yes

Understanding Certificates

Automated certificate enrollment using Simple Certificate Enrollment Protocol (SCEP)

Yes

Yes

Using Digital Certificates

Automatic generation of self-signed certificates

Yes

Yes

Understanding Self-Signed Certificates

Distinguished Encoding Rules (DER), Privacy-Enhanced Mail (PEM), Public-Key Cryptography Standard 7 (PKCS7), and X509 certificate encoding

Yes

Yes

Manually Loading a CRL onto the Device

Manual installation of DER-encoded and PEM-encoded CRLs

Yes

Yes

Manually Loading a CRL onto the Device

Online certificate revocation list (CRL) retrieval through LDAP and HTTP

Yes

Yes

PKI Management and Implementation

CRL update at user-specified interval

Yes

Yes

Understanding Certificate Revocation Lists


[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]