8.2 Obtaining authentication credential procedure

When an ASN/MN or ADN node is required to be authenticated, a mgmtLink 'authProfile' referring to the <mgmtObj> resource specialization for maintaining the Authentication Profiles shall be provided.

The Authentication Profile contains following information:

Choice of TLS options.
mgmtLinkRef(s) to the <mgmtObj> which provides information required to obtain the credential(s).

When an ASN/MN or ADN node is establishing the appropriate security associations, the <mgmtObj> specialization for Authentication Profile shall be used to identify the security related settings.

Actual credential shall be obtained using the information on the <mgmtObj> specializations (Authentication Credential Configuration) which is referred by mgmtLinkRef(s) from Authentication Profile.

Figure 8.2-1: Relationship between 'Authentication Profile' and 'Authentication Credential Configuration(s)'

Figure 8.2-1: Relationship between 'Authentication Profile' and 'Authentication Credential Configuration(s)'