Enrollment (Trustpoint Configuration Mode) - Allied Telesis x310-26FT Command Reference Manual

P K I C
UBLIC EY NFRASTRUCTURE OMMANDS
(
ENROLLMENT TRUSTPOINT CONFIGURATION MODE

enrollment (trustpoint configuration mode)

Overview Use this command to declare how certificates will be added to the system for the
current trustpoint.
enrollment {selfsigned|terminal}
Syntax
Mode Trustpoint Configuration
Usage If the enrollment is set to selfsigned, then the system will generate a root CA
certificate and its associated key when the crypto pki authenticate command is
issued. It will generate a server certificate (signed by the root CA certificate) when
the crypto pki enroll command is issued.
If the enrollment is set to terminal, then the system will prompt the user to paste
the root CA certificate Privacy Enhanced Mail (PEM) file at the terminal, when the
crypto pki authenticate command is issued. It will create a Certificate Signing
Request (CSR) file for the local server when the crypto pki enroll command is
issued. The server certificate received from the external CA should be imported
using the crypto pki import pem command.
The trustpoint named "local" may only use the selfsigned enrollment setting.
If no enrollment mode is specified, the crypto pki authenticate command will fail
for the trustpoint.
Example To configure the trustpoint named "example" and set its enrollment to selfsigned,
use the following commands:
awplus>
awplus#
awplus(config)#
awplus(ca-trustpoint)#
Related crypto pki enroll
Commands
C613-50103-01 REV A
)
Parameter Description
selfsigned
Sets the enrollment mode for the current trustpoint to selfsigned.
terminal
Sets the enrollment mode for the current trustpoint to terminal.
enable
configure terminal
crypto pki trustpoint example
Command Reference for x310 Series
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
enrollment selfsigned
1828