Http Trustpoint - Allied Telesis IE220 Series Manual

D GUI V M
EVICE AND ISTA ANAGER

HTTP TRUSTPOINT

http trustpoint
Overview Use this command to set the PKI trustpoint to use for secure HTTP communication
to an AlliedWare Plus device.
Use the no variant of this command to revert to using the default trustpoint
'default-selfsigned'.
Syntax http trustpoint <trustpoint-name>
no http trustpoint
Default By default, HTTP uses the 'default-selfsigned' trustpoint.
Mode Global Configuration
Usage notes Before using the http trustpoint command you will need to establish a trustpoint.
For example, you can create a local self-signed trustpoint using the procedure
outlined below.
Create a self-signed trustpoint called 'vista' with keypair 'vista_key':
awplus#
awplus(config)#
awplus(ca-trustpoint)#
awplus(ca-trustpoint)#
awplus(ca-trustpoint)#
awplus(config)#
Create the root and server certificates for this trustpoint:
awplus#
awplus#
For more information about the AlliedWare Plus implementation of Public Key
Infrastructure (PKI), see the
Configuration Guide
Example To configure HTTP to use the trustpoint 'vista', use the commands:
awplus#
awplus(config)#
C613-50644-01 Rev B
EX C
OMMANDS
Parameter
<trustpoint-name>
configure terminal
crypto pki trustpoint vista
exit
crypto pki authenticate vista
crypto pki enroll vista
configure terminal
http trustpoint vista
Command Reference for IE220 Series
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
Description
Name of trustpoint
enrollment selfsigned
rsakeypair vista_key
exit
Public Key Infrastructure (PKI) Feature Overview and
99