JIMS support Junos PKI infrastructure

You configure ca-profile under set security pki and assign ca-profile under JIMS by using ca-profile option at the edit services user-identification identity-management connection (primary | secondary) hierarchy level. You can perform CRL and OCSP checks based on settings under set security pki for the corresponding ca-profile. With the introduction of a new ca-profile, we will deprecate the existing ca-certificate option at the edit services user-identification identity-management connection (primary | secondary) hierarchy level.