Chapter 10 of 11 · Huawei HCIA-Security H12-711
PKI Certificate System
Digital envelopes, digital signatures, certificates, CA, RA, CRL, OCSP and certificate enrollment.
- 1topics
- 6 minfast track
- 5%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
About this chapter
What this chapter covers
PKI Certificate System is 5% of the Huawei HCIA-Security H12-711 exam. It covers how digital envelopes, digital signatures and digital certificates fix the weaknesses of plain encryption, the parts of a PKI (end entity, CA, RA and certificate repository), and how a certificate is requested, issued, checked and revoked.
Questions are single-answer, multiple-answer without a stated count, true/false, drag and drop and typed fill-in-the-blank, often "Which of the following statements is true?". Some show firewall topology figures or display output, but most PKI questions ask which key is used at each step, what a certificate contains, or which component does a job.
It has 3 outline topics, and one page covers them.
How the topics fit together
Each security technology answers a problem left by the one before it. Certificates then need someone trusted to issue and revoke them, and that is the PKI.
The certificates built here are what IPsec peers and SSL VPN gateways use to authenticate each other in the next chapter.
For every step, ask whose key and which half. Envelope: receiver's public key locks the session key. Signature: sender's private key signs the digest. Certificate: the CA's private key signs the certificate.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and examples.
- What to remember for the exam: the facts to memorize.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Read each configuration snippet and say what it does before reading the explanation. The exam often shows a short configuration and asks which traffic is permitted, translated or allowed to log in.
Ready for more practice?
The full Huawei HCIA-Security H12-711 question bank has 600 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Huawei. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.