Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 81

Implementing Certification Authority Interoperability on Cisco IOS XR Software
Command or Action
Step 6
crypto ca enroll ca-name
Example:
RP/0/RP0/CPU0:router# crypto ca enroll myca
Step 7
crypto ca import ca-name certificate
Example:
RP/0/RP0/CPU0:router# crypto ca import myca
certificate
Step 8
show crypto ca certificates
Example:
RP/0/RP0/CPU0:router# show crypto ca certificates
Configuration Examples for Implementing Certification
Authority Interoperability
This section provides the following configuration example:
•
Configuring Certification Authority Interoperability: Example
The following example shows how to configure CA interoperability.
Comments are included within the configuration to explain various commands.
configure
hostname myrouter
domain name mydomain.com
end
Uncommitted changes found, commit them? [yes]:yes
crypto key generate rsa mykey
The name for the keys will be:mykey
Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose
Keypair
Choosing a key modulus greater than 512 may take a few minutes.
How many bits in the modulus [1024]:
Generating RSA keys ...
OL-20382-01
Configuring Certification Authority Interoperability: Example, page SC-75
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
Configuration Examples for Implementing Certification Authority Interoperability
Purpose
Obtains the certificates for your router from the CA.
• Use the ca-name argument to specify the name
of the CA. Use the same name that you entered
in Step 2.
Imports a certificate manually at the terminal.
• Use the ca-name argument to specify the name
of the CA. Use the same name that you entered
in Step 2.
You must enter the crypto ca import
Note
command twice if usage keys (signature and
encryption keys) are used. The first time the
command is entered, one of the certificates
is pasted into the router; the second time the
command is entered, the other certificate is
pasted into the router. (It does not matter
which certificate is pasted first.
Displays information about your certificate and the
CA certificate.
SC-75