HP ProCurve 7102dl Reference Manual page 342

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set
crypto ca enroll <name>
Use the crypto ca enroll command to begin CA enrollment procedures.
Syntax Description
<name> Specifies CA profile by alphanumeric string of up to 32 characters.
Default Values
No defaults necessary for this command.
Functional Notes
The type of enrollment procedure is based on the enrollment command and its settings. See enrollment
terminal on page 1216 and enrollment url <url> on page 1217 for more information. This command
initiates a dialog that is used to fill in the parameters that make up an enrollment request to be forwarded to
a certificate authority. Note that some of the parameters (such as IP address) may be filled in using the
values supplied in the crypto ca profile (in which case, the enrollment dialog will not prompt for those
parameters). Once all required parameters are defined using the dialog, this command assembles them
into an enrollment request to be sent to a certificate authority (including the generation of public and
private keys). See crypto ca profile for more information.
If enrollment is set to terminal, you may view the request on the terminal screen.
If enrollment is set to url, the request is sent automatically to the certificate authority using the URL
specified by the enrollment url command.
Usage Examples
The following example shows a typical enrollment dialog:
ProCurve(config)#crypto ca enroll MyProfile
**** Press CTRL+C to exit enrollment request dialog. ****
* Enter signature algorithm (RSA or DSS) [rsa]:rsa
* Enter the modulus length to use [512]:1024
* Enter the subject name as an X.500 (LDAP) DN:CN=Router,C=US,L=Roseville,S=CA
--The subject name in the certificate will be CN=CN=Router,C=US,L=Roseville,S=CA.
* Include an IP address in the subject name [n]:y
* Enter IP address or name of interface to use:10.200.1.45
* Include fully qualified domain name [n]:y
* Enter the fully qualified domain name to use:FullyQualifiedDomainName
* Include an email address [n]:y
* Enter the email address to use:myemail@email.com
Generating request (including keys)....
5991-2114 © Copyright 2007 Hewlett-Packard Development Company, L.P. 340