Cisco CRS User Manual page 205

Public Key Infrastructure Commands
•
•
•
•
•
•
Task ID
Task ID
crypto
Examples The following example shows how to use the crypto ca trustpoint command to create a trustpoint:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# crypto ca trustpoint msiox
RP/0/RP0/CPU0:router(config-trustp)# sftp-password xxxxxx
RP/0/RP0/CPU0:router(config-trustp)# sftp-username tmordeko
RP/0/RP0/CPU0:router(config-trustp)# enrollment url
sftp://192.168..254.254/tftpboot/tmordeko/CAcert
RP/0/RP0/CPU0:router(config-trustp)# rsakeypair label-2
Related Commands
Command
crl optional (trustpoint), on page 186
enrollment retry count, on page 206
enrollment retry period, on page 208
enrollment url, on page 211
query url, on page 215
rsakeypair, on page 217
sftp-password (trustpoint), on page 220
sftp-username (trustpoint), on page 222
OL-24740-01
query url, on page 215command—The directory server URL in which the Certificate Revocation List
(CRL) is published. Only a string that begins with "ldap://" is accepted.
Required only if your CA supports Lightweight Directory Access Protocol (LDAP).
rsakeypair, on page 217command—The named Rivest, Shamir, and Adelman (RSA) key pair for this
trustpoint.
serial-number (trustpoint), on page
sftp-password (trustpoint), on page
sftp-username (trustpoint), on page
subject-name (trustpoint), on page
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
218command—Router serial number in the certificate request.
220command—FTP secure password.
222command—FTP secure username.
224command—Subject name in the certificate request.
Operations
execute
Description
Allows the certificates of other peers to be accepted
without trying to obtain the appropriate CRL.
Specifies how many times a router resends a
certificate request.
Specifies the wait period between certificate request
retries.
Specifies the URL of the CA.
Specifies the LDAP URL of the CRL distribution
point.
Specifies a named RSA key pair for this trustpoint.
Secures the FTP password.
Secures the FTP username.
crypto ca trustpoint
195