Cisco Catalyst 2960-XR Security Configuration Manual page 119

Configuring Secure Socket Layer HTTP
SUMMARY STEPS
1. configure terminal
2. hostname hostname
3. ip domain-name domain-name
4. crypto key generate rsa
5. crypto ca trustpoint name
6. enrollment url url
7. enrollment http-proxy host-name port-number
8. crl query url
9. primary name
10. exit
11. crypto ca authentication name
12. crypto ca enroll name
13. end
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Step 2
hostname hostname
Example:
Switch(config)# hostname your_hostname
Step 3 ip domain-name domain-name
Example:
Switch(config)# ip domain-name your_domain
Step 4
crypto key generate rsa
Example:
Switch(config)# crypto key generate rsa
OL-29434-01
Purpose
Enters the global configuration mode.
Specifies the hostname of the switch (required only if you have
not previously configured a hostname). The hostname is required
for security keys and certificates.
Specifies the IP domain name of the switch (required only if you
have not previously configured an IP domain name). The domain
name is required for security keys and certificates.
(Optional) Generates an RSA key pair. RSA key pairs are required
before you can obtain a certificate for the switch. RSA key pairs
are generated automatically. You can use this command to
regenerate the keys, if needed.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Configuring a CA Trustpoint
97