Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 218

Contents
Release 3.8.0
Release 3.9.0
Contents
•
•
•
•
•
Prerequisites for Implementing Secure Socket Layer
The following prerequisites are required to implement SSL:
•
•
•
•
•
Information About Implementing Secure Socket Layer
To implement SSL you need to understand the following concept:
•
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-212
Advanced Encryption Standard (AES) encryption support was added on the
SSL server.
No modification.
Prerequisites for Implementing Secure Socket Layer, page SC-212
Information About Implementing Secure Socket Layer, page SC-212
How to Implement Secure Socket Layer, page SC-213
Configuration Examples for Implementing Secure Socket Layer, page SC-216
Additional References, page SC-217
You must be in a user group associated with a task group that includes the proper task IDs for
security commands. The command reference guides include the task IDs required for each
command.
If you suspect user group assignment is preventing you from using a command, contact your AAA
administrator for assistance.
You must install and activate the Package Installation Envelope (PIE) for the security software.
For detailed information about optional PIE installation, refer to the Cisco IOS XR Getting Started
Guide.
Before you can begin using SSL, you must generate either Rivest, Shamir, and Adelman (RSA) or
Digital Signature Algorithm (DSA) key pairs, enroll with a CA, and obtain the CA certificate for the
router key.
SSL servers support Advanced Encryption Standard (AES), which has key sizes of 128, 192, and
256 bits.
For more information on the commands required to perform these tasks, see the crypto key
generate rsa, crypto key generate dsa, crypto ca enroll, and crypto ca authenticate commands
in the Public Key Infrastructure Commands on Cisco IOS XR Software module of the Cisco IOS XR
System Security Command Reference.
Purpose of Certification Authorities, page SC-213
Implementing Secure Socket Layer on Cisco IOS XR Software
OL-20382-01