The system X509 commands enable you to manage X.500 distinguished name parameters on the local node (that is, the node on which the commands are run). X.500 distinguished name parameters are not cluster wide. For information about the X.500 user schema, see RFC 2256.
To set X.500 distinguished name parameters on a node, use the system X509 modify command on that node. The command can be used to set one, more, or all of the following parameters:
Two-character country code
State or province
Locality (city or municipality)
Organization name
Organization unit
Common name
Contact e-mail address
The following example sets the following X.500 distinguished name parameters on the local node: the country US, the state IL, the locality Chicago, the organization Froman Sausages, the unit sausage recipes, the name kielbasa1, and the e-mail contact abe@sausagekingofchicago.com.
node::>system X509 modify -country US -state IL -locality Chicago -organization "Froman Sausages" -unit "sausage recipes" -name kielbasa1 -email_addr abe@sausagekingofchicago.com
The system X509 show command displays X.500 distinguished name parameters for the local node, as shown in the following example:
node::>system X509 showCountry: US State/Province: IL Locality: Chicago Organization Name: Froman Sausages Organization Location: sausage recipes Common Name: kielbasa1 Email Address: abe@sausagekingofchicago.com