Configuration Examples For Implementing Certification Authority Interoperability; Configuring Certification Authority Interoperability: Example - Cisco IOS XR Configuration Manual

Configuration Examples for Implementing Certification Authority Interoperability

Command or Action
Step 6
crypto ca enroll ca-name
Example:
RP/0/RP0/CPU0:router# crypto ca enroll myca
Step 7
crypto ca import ca- name certificate
Example:
RP/0/RP0/CPU0:router# crypto ca import myca
certificate
Step 8
show crypto ca certificates
Example:
RP/0/RP0/CPU0:router# show crypto ca certificates
Configuration Examples for Implementing Certification
Authority Interoperability
This section provides the following configuration example:
•

Configuring Certification Authority Interoperability: Example

The following example shows how to configure CA interoperability.
Comments are included within the configuration to explain various commands.
configure
hostname myrouter
domain name mydomain.com
end
Uncommitted changes found, commit them? [yes]:yes
crypto key generate rsa mykey
The name for the keys will be:mykey
Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose
Keypair
Choosing a key modulus greater than 512 may take a few minutes.
How many bits in the modulus [1024]:
Generating RSA keys ...
Cisco IOS XR System Security Configuration Guide
SC-14
Configuring Certification Authority Interoperability: Example, page SC-14
Implementing Certification Authority Interoperability on Cisco IOS XR Software
Purpose
Obtains the certificates for your router from the CA.
Use the ca-name argument to specify the name
•
of the CA. Use the same name that you entered
in Step 2.
Imports a certificate manually at the terminal.
Use the ca-name argument to specify the name
•
of the CA. Use the same name that you entered
in Step 2.
Note You must enter the crypto ca import
command twice if usage keys (signature and
encryption keys) are used. The first time the
command is entered, one of the certificates
is pasted into the router; the second time the
command is entered, the other certificate is
pasted into the router. (It does not matter
which certificate is pasted first.
Displays information about your certificate and the
CA certificate.