No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
country (PKI entity view)

country (PKI entity view)


The country command configures a country code for an entity.

The undo country command deletes the country code of a PKI entity.

By default, no country code is configured for a PKI entity.


country country-code

undo country


Parameter Description Value
country-code Specifies the country code of a PKI entity. A country code must be two-character long. If the entered country code contains lower case letters, the system automatically changes the lower case letters into upper case letters when you create a certificate request file.

You can query country codes in ISO3166. For example, CN is the legitimate country code of China, and US is the legitimate country code of the USA.


PKI entity view

Default Level

2: Configuration level

Usage Guidelines

The parameters of a PKI entity contain the identity information of the entity. The CA identifies a certificate applicant based on identity information provided by the entity. To facilitate applicant identification, configure the country code for the PKI entity, which is used as an alias of the entity.

After the country code is configured for a PKI entity, the certificate request packet sent by the device to the CA server carries this country code. The CA server verifies every received certificate request packet. For each valid packet, the CA server generates a digital certificate carrying the country code of the PKI entity.


# Configure the country code to CN for a PKI entity.

<Huawei> system-view
[Huawei] pki entity entity1
[Huawei-pki-entity-entity1] country CN
Related Topics
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 204382

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next