Generating A Mini Certificate - Cisco SR520-FE-K9 Administration Manual

6
114

Generating a Mini Certificate

Cisco provides a Mini Certificate Generator for the generation of mini certificates
and private keys. Contact your Cisco representative to access this tool.
The Mini Certificate Generator uses the following syntax:
ca-key user-name user-id expire-date
gen_mc
Where:
• ca-key is a text file with the base64 encoded 1024-bit CA private/public
key pairs for signing/verifying the MC, such as the following:
9CC9aYU1X5lJuU+EBZmi3AmcqE9U1LxEOGwopaGyGOh3VyhKgi6JaVtQZt87PiJINKW8XQj3B9Qq
e3VgYxWCQNa335YCnDsenASeBxuMIEaBCYd1l1fVEodJZOGwXwfAde0MhcbD0kj7LVlzcsTyk2TZ
YTccnZ75TuTjj13qvYs=5nEtOrkCa84/mEwl3D9tSvVLyliwQ+u/
Hd+C8u5SNk7hsAUZaA9TqH8Iw0J/
IqSrsf6scsmundY5j7Z5mK5J9uBxSB8t8vamFGD0pF4zhNtbrVvIXKI9kmp4vph1C5jzO9gDfs3M
F+zjyYrVUFdM+pXtDBxmM+fGUfrpAuXb7/k=
• user-name is the name of the subscriber, such as "Joe Smith". Maximum
length is 32 characters.
• user-id is the User ID of the subscriber, which must match exactly the user-
id used in the INVITE when making the call, such as "14083331234". The
maximum length is 16 characters.
• expire-date is the expiration date of the MC, such as "00:00:00 1/1/34"
34=2034). Internally the date is encoded as a fixed 12B string:
000000010134
The tool generates the Mini Certificate and SRTP Private Key parameters that can
be provisioned.
Example:
gen_mc ca_key "Joe Smith" 14085551234 "00:00:00 1/1/34"
This example produces the following Mini Certificate and SRTP Private Key:
<Mini Certificate>
Sm9lIFNtaXRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxNDA4NTU1MTIzNAAAAAAAMDAwMDAwMDEw
MTM00OvJakde2vVMF3Rw4pPXL7lAgIagMpbLSAG2+++YlSqt198Cp9rP/
xMGFfoPmDKGx6JFtkQ5sxLcuwgxpxpxkeXvpZKlYlpsb28L4Rhg5qZA+Gqj1hDFCmG6dffZ9SJhx
ES767G0JIS+N8lQBLr0AuemotknSjjjOy8c+1lTCd2t44Mh0vmwNg4fDck2YdmTMBR516xJt4/
uQ/
LJQlni2kwqlm7scDvll5k232EvvvVtCK0AYa4eWd6fQOpiESCO9CC9aYU1X5lJuU+EBZmi3AmcqE
9U1LxEOGwopaGyGOh3VyhKgi6JaVtQZt87PiJINKW8XQj3B9Qqe3VgYxWCQNa335YCnDsenASeBx
uMIEaBCYd1l1fVEodJZOGwXwfAde0MhcbD0kj7LVlzcsTyk2TZYTccnZ75TuTjj13qvYs=
<SRTP Private Key>
b/DWc96X4YQraCnYzl5en1CIUhVQQqrvcr6Qd/8R52IEvJjOw/
e+Klm4XiiFEPaKmU8UbooxKG36SEdKusp0AQ==
Cisco SRP500 Series Services Ready Platforms Administration Guide (SRP520 Models)
Configuring Voice
Configuring Dial Plans