Serial-Number (Trustpoint) - Cisco CRS User Manual

serial-number (trustpoint)

serial-number (trustpoint)
To specify whether the router serial number should be included in the certificate request, use the serial-number
command in trustpoint configuration mode. To restore the default behavior, use the no form of this command.
serial-number [none]
no serial-number
Syntax Description
none
Command Default
You are prompted for the serial number during certificate enrollment.
Command Modes
Trustpoint configuration
Command History
Release
Release 3.4.0
Usage Guidelines
Before you can use the serial-number command, you must enable the crypto ca trustpoint command, which
declares the certification authority (CA) that your router should use and enters trustpoint configuration mode.
Use this command to specify the router serial number in the certificate request, or use the none keyword to
specify that a serial number should not be included in the certificate request.
Task ID
Task ID
crypto
Examples The following example shows how to omit a serial number from the root certificate request:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# crypto ca trustpoint root
RP/0/RP0/CPU0:router(config-trustp)# enrollment url http://10.3.0.7:80
RP/0/RP0/CPU0:router(config-trustp)# ip-address none
RP/0/RP0/CPU0:router(config-trustp)# serial-number none
RP/0/RP0/CPU0:router(config-trustp)# subject-name ON=Jack, OU=PKI, O=Cisco Systems, C=US
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
218
(Optional) Specifies that a serial number is not included in the certificate request.
Modification
This command was introduced.
Operations
read, write
Public Key Infrastructure Commands
OL-24740-01