Display The User Database 39+\33 - Cisco PIX 500 Series Configuration Manual

Chapter 39 Configuring Certificates
hostname(config)#
Display the User Database
To display users in the CA server user database, use the show crypto ca server user-db command. This
command can be used with qualifiers to reduce number of records displayed. Qualifiers are:
•
•
•
•
The following example shows the resulting display (edited) for the entire database with no qualifiers.
hostname (config)#show crypto ca server user-db
username: wilma24
email:
dn:
allowed:
notified: 1
.
.
.
username: wilma98
email:
dn:
allowed:
notified: 1
username: wilma99
email:
dn:
allowed:
notified: 1
hostname(config)#
The following example shows the display of the show crypto ca server user-db command when the
on-hold qualifier is used yielding just one user on-hold:
hostname (config)# show crypto ca server user-db on-hold
username: wilma101
email:
OL-12172-03
Serial Number: 0x6f
Revocation Date: 12:30:01 UTC Jan 4 2008
Serial Number: 0x47
Revocation Date: 13:32:48 UTC Jan 4 2008
allowed show only users currently allowed to enroll.
enrolled Show only users that are enrolled and hold a valid certificate
expired Show only users holding expired certificates.
on-hold List only users without a certificate and not currently allowed to enroll.
wilma24@xxrown.com
CN=mycn,OU=Sales,O=ASC.com,L=Franklin,ST=Mass,C=US
12:29:08 UTC Sun Jan 6 2008
wilma98@xxrown.com
CN=mycn,OU=Sales,O=ASC.com,L=Franklin,ST=Mass,C=US
12:29:18 UTC Sun Jan 6 2008
wilma99@xxrown.com
CN=mycn,OU=Sales,O=ASC.com,L=Franklin,ST=Mass,C=US
12:29:18 UTC Sun Jan 6 2008
<None>
Cisco Security Appliance Command Line Configuration Guide
The Local CA
39-33