Configure cmp-profile

You configure cmp-profile objects to establish CMP-related configuration to individual certificate-records. After configuring these profiles, you can apply them to multiple certificate-records. You can also apply multiple cmp-server-group elements to a cmp-profile. If the source cmp-server-group is empty, and the cmp-profile object is referenced by a certificate-record, then you must manually manage that certificate.

Configure the SBC with all applicable cmp-server-groups objects.

This feature is most applicable for managing deployments that include large numbers of certificates. Follow the steps below to configure each cmp-profile:

1. Access the cmp-profile configuration element.

   ORACLE(cmp)# cmp-profile
   ORACLE(cmp-profile)#

2. name: Enter the Name of the cmp-profile to identify this object and reference it in the applicable certificate-record.
3. cmp-server-group: Enter the cmp-server-group that contains the applicable list of CMP servers with which the system interacts.
4. cmp-retry-count: In the case of CMP connection failure or CMP message timeout, the maximum number of attempts the system tries to establish connection towards the cmp-servers configured in the cmp-server-group in a round robin fashion.
   • Default: 2
   • Range: 1 to 10
5. Type done to establish this cmp-profile.
6. Save and activate your configuration.