Generating A Certificate Request For Enrollment - Nortel Secure 4134 Configuration

170 IPsec VPN configuration
In order to authenticate the CA, you should verify the fingerprint of the
imported certificate with the actual fingerprint of the CA obtained through
any out-of-band mechanism.
Procedure steps
Step
1
2
3
Generating a certificate request for enrollment
Generate a certificate request for enrollment with the certificate authority.
This command interactively collects the certificate information from the user,
generates the private and public keys, and generates the certificate request
in the required format. The generated certificate request is submitted to the
CA through the configured enrollment method.
If the configured enrollment method is SCEP, then, the certificate request is
automatically submitted to the CA. If the enrollment method is manual, the
certificate request is printed on the standard output in the required format.
Procedure steps
Step
1
2
3
Copyright © 2007, Nortel Networks
.
Action
To enter the configuration mode, enter:
configure terminal
To specify crypto configuration for IPsec and IKE, enter:
crypto
To specify the CA trustpoint, enter:
ca authenticate <ca-name>
If SCEP enrollment, the system imports the digital certificate of
the CA using SCEP. If manual enrollment is specified, the system
prompts you to enter the certificate.
Action
To enter the configuration mode, enter:
configure terminal
To specify crypto configuration for IPsec and IKE, enter:
crypto
To generate the certificate request, enter:
ca enroll <ca-name>
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
—End—