Adding A Certificate As A Trusted Certificate Using Snmp Commands - Cisco cBR 8 Configuration Manual

Adding a Manufacturer's Certificate as a Trusted Certificate
Step 2
Step 3
Step 4

Adding a Certificate as a Trusted Certificate Using SNMP Commands

You can also use an SNMP manager to create and add certificates to the CMTS list of trusted certificates by
manipulating the tables and attributes in the
an entry to the docsBpi2CmtsCACertTable table. Specify the following attributes for each entry:
• docsBpi2CmtsCACertStatus—Set to 4 to create the row entry.
• docsBpi2CmtsCACert—The hexadecimal data, as an X509Certificate value, for the actual X.509
certificate.
• docsBpi2CmtsCACertTrust—An Integer value from 1 to 4 specifying the certificate's trust status:
1=trusted, 2=untrusted, 3= chained, 4=root. Specify 1 for certificates that should be trusted and 3 for
chained certificates that should be verified with the root certificate.
Similarly, to add a CM certificate to the list of trusted certificates, add an entry to the
docsBpi2CmtsProvisionedCmCertTable table. Specify the following attributes for each entry:
• docsBpi2CmtsProvisionedCmCertStatus—Set to 4 to create the row entry.
• docsBpi2CmtsProvisionedCmCert—The hexadecimal data, as an X509Certificate value, for the actual
X.509 certificate.
• docsBpi2CmtsProvisionedCmCertTrust—An Integer value from 1 to 2 specifying the certificate's trust
status: 1=trusted, 2=untrusted. Specify 1 for CM certificates that should be trusted.
Cisco cBR Series Converged Broadband Routers Quality of Services Configuration Guide for Cisco IOS XE
Fuji 16.7.x
54
Command or Action
configure terminal
Example:
Router# configure terminal
Router(config)#
cable privacy add-certificate manufacturer
serial-number
Example:
Router(config)# cable privacy
add-certificate manufacturer 000102
Router(config)#
exit
Example:
Router(config)# exit
Router#
Purpose
Enters global configuration mode.
(Optional) Specifies the serial number of the
manufacturer CA certificate to be added as a
trusted certificate.
Exits global configuration mode.
DOCS-BPI-PLUS-MIB . To add a manufacturer's certificate, add
DOCSIS 1.1 for the Cisco CMTS Routers