Cisco CRS User Manual page 222

enrollment url
1 If you are using TFTP for enrollment, the URL must be in the form tftp://certserver/file_specification. (The file specification is optional.)
TFTP enrollment sends the enrollment request and retrieves the certificate of the CA and the certificate of the
router. If the file specification is included in the URL, the router appends an extension to the file specification.
To change the CA URL, repeat the enrollment url command to overwrite the previous URL
Task ID
Task ID
crypto
Examples
The following example shows the absolute minimum configuration required to declare a CA:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)#
RP/0/RP0/CPU0:router(config-trustp)#
Related Commands
Command
crl optional (trustpoint), on page 186
crypto ca trustpoint, on page 194
ip-address (trustpoint), on page 213
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
212
crypto ca trustpoint myca
enrollment url http://ca.domain.com/certsrv/mscep/mscep.dll
Public Key Infrastructure Commands
Operations
read, write
Description
Allows the certificates of other peers to be accepted
without trying to obtain the appropriate CRL.
Configures a trusted point with a selected name.
Specifies a dotted IP address that is included as an
unstructured address in the certificate request.
OL-24740-01