Cisco ASA Series Cli Configuration Manual page 2044

Configuring Anonymous Reporting and Smart Call Home
Declaring and Authenticating a CA Trust Point
If Smart Call Home is configured to send messages to a web server through HTTPS, you need to
configure the ASA to trust the certificate of the web server or the certificate of the Certificate Authority
(CA) that issued the certificate. The Cisco Smart Call Home Production server certificate is issued by
Verisign. The Cisco Smart Call Home Staging server certificate is issued by Digital Signature Trust Co.
Detailed Steps
To declare and authenticate the Cisco server security certificate and establish communication with the
Cisco HTTPS server for Smart Call Home service, perform the following steps:
Step 1
changeto context admincontext
Example:
hostname(config)# changeto context contextA
Step 2
crypto ca trustpoint trustpoint-name
Example:
hostname(config)# crypto ca trustpoint cisco
Step 3
enroll terminal
Example:
hostname(ca-trustpoint)# enroll terminal
Step 4
crypto ca authenticate trustpoint
Example:
hostname(ca-trustpoint)# crypto ca authenticate
cisco
Step 5
quit
Example:
hostname(ca-trustpoint)# quit
%Do you accept this certificate [yes/no]:
yes
Cisco ASA Series CLI Configuration Guide
1-8
Chapter 1 Configuring Anonymous Reporting and Smart Call Home
(Multiple Context Mode only) Installs the certificate
in the admin context.
Configures a trust point and prepares for certificate
enrollment.
Note
If you use HTTP as the transport method,
you must install a security certificate
through a trust point, which is required for
HTTPS. Find the specific certificate to
install at the following URL:
http://www.cisco.com/en/US/docs/switches/lan
/smart_call_home/SCH31_Ch6.html#wp10353
80
Specifies a manual cut-and-paste method of
certificate enrollment.
Authenticates the named CA. The CA name should
match the trust point name specified in the crypto ca
trustpoint command. At the prompt, paste the
security certificate text.
Specifies the end of the security certificate text and
confirms acceptance of the entered security
certificate.