Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 75

Implementing Certification Authority Interoperability on Cisco IOS XR Software
DETAILED STEPS
Command or Action
Step 1
crypto key import authentication rsa [usage
keys | general-keys] [keypair-label]
Example:
RP/0/RP0/CPU0:router# crypto key import
authentication rsa general-keys
Step 2
show crypto key mypubkey rsa
Example:
RP/0/RP0/CPU0:router# show crypto key mypubkey
rsa
Declaring a Certification Authority and Configuring a Trusted Point
This task declares a CA and configures a trusted point.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
OL-20382-01
configure
crypto ca trustpoint ca-name
enrollment url CA-URL
query url LDAP-URL
enrollment retry period minutes
enrollment retry count number
rsakeypair keypair-label
end
or
commit
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
Purpose
Generates RSA key pairs.
Use the usage keys keyword to specify special usage
•
keys; use the general-keys keyword to specify general-
purpose RSA keys.
The keypair-label argument is the RSA key pair label
•
that names the RSA key pairs.
(Optional) Displays the RSA public keys for your router.
How to Implement CA Interoperability
SC-69