Enrollment Url - Cisco CRS User Manual

Public Key Infrastructure Commands

enrollment url

To specify the certification authority (CA) location by naming the CA URL, use the enrollment url command
in trustpoint configuration mode. To remove the CA URL from the configuration, use the no form of this
command.
enrollment url CA-URL
no enrollment url CA-URL
Syntax Description
CA-URL
Command Default
None
Command Modes
Trustpoint configuration
Command History
Release
Release 2.0
Release 3.4.0
Usage Guidelines
Use the enrollment url command to specify the CA URL. This command is required when you declare a
CA with the crypto ca trustpoint command. The URL must include the CA script location if the CA scripts
are not loaded into the default cgi-bin script location. The CA administrator should be able to tell you where
the CA scripts are located.
This table lists the available enrollment methods.
Table 12: Certificate Enrollment Methods
Enrollment Method
SFTP
TFTP
OL-24740-01
URL of the CA server. The URL string must start with http://CA_name, where CA_name is
the host Domain Name System (DNS) name or IP address of the CA (for example,
http://ca-server).
If the CA cgi-bin script location is not /cgi-bin/pkiclient.exe at the CA (the default CA cgi-bin
script location), you must also include the nonstandard script location in the URL, in the form
of http://CA-name/script-location, where script-location is the full path to the CA scripts.
1
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
Modification
This command was introduced.
Both SFTP and TFTP enrollment methods were added.
Description
Enroll through SFTP: file system
Enroll through TFTP: file system
enrollment url
211