Crypto Pki Enroll - Allied Telesis x510-28GTX Command Reference Manual

P K I C
UBLIC EY NFRASTRUCTURE OMMANDS

CRYPTO PKI ENROLL

crypto pki enroll
Overview Use this command to enroll the local server to the specified trustpoint.
Use the no variant of this command to de-enroll the server by removing its
certificate
Syntax crypto pki enroll <trustpoint>
no crypto pki enroll <trustpoint>
Mode Privileged Exec
Usage For the local server, "enrollment" is the process of creating of a certificate for the
server that has been signed by a CA associated with the trustpoint. The public
portion of the RSA key pair specified using the rsakeypair parameter for the
trustpoint will be included in the server certificate.
If the trustpoint represents a locally self-signed certificate authority, then this
command results in the direct generation of the server certificate, signed by the
root CA for the trustpoint.
If the trustpoint represents an external certificate authority, then this command
results in the generation of a Certificate Signing Request (CSR) file, which is
displayed at the terminal in Privacy-Enhanced Mail (PEM) format, suitable for
copying and pasting into a file or message. The CSR must be sent to the external
CA for processing. When the CA replies with the signed certificate, that certificate
should be imported using the crypto pki import pem command, to complete the
enrollment process.
The specified trustpoint must already exist, and it must already be authenticated.
Example To enroll the local server with the trustpoint "example", use the following
commands:
awplus>
awplus#
Related crypto pki enroll user
Commands
crypto pki import pem
crypto pki trustpoint
enrollment (trustpoint configuration mode)
C613-50170-01 Rev B
Parameter Description
<trustpoint>
The name of the trustpoint to be enrolled
enable
crypto pki enroll example
Command Reference for x510 Series
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
1954