| 摘要 |
Disclosed are a certificate acquisition method and device, comprising: a VNFM receives a certificate request proxy message sent by a VNF instance, said certificate request proxy message comprising authentication information and certificate request information used for requesting a certificate, said authentication information being used for establishing a proxy certificate request channel between the VNF instance and the VNFM; the VNFM uses the authentication information to implement authentication of the VNF instance, and when authentication is successful, sends a certificate request message to a CA, said certificate request message comprising certificate request information used for requesting a certificate; the VNFM receives a certificate issued by the CA, and sends same to the VNF instance. Thus, an instantiated VNF instance requests a certificate issued by a certificate authentication centre by means of a trusted link between a VNFM and the certificate authentication centre, thereby effectively ensuring the validity of the VNF instance certificate request, and ensuring, by means of the certificate issued by the certificate authentication centre, the security of a management channel established between the VNF instance and the VNFM. |
