Table of Contents
Advertisement
Mode
Global configuration:
Sample Output
The following script prompts you to accept the certificate.
XSR#crypto ca authenticate ACMEca
Certificate has the following attributes:
Fingerprint: 0123 4567 89AB CDEF 0123
Do you accept this certificate? [yes/no] y
crypto ca certificate chain
This command invokes Certificate Chain mode. In this mode, you can delete a certificate by
entering the
•
Ask the CA administrator to revoke XSRʹs certificates at the CA; you must supply the
challenge password you created when you first got the certificates with
•
Remove the XSRʹs certificates from the configuration using the
Syntax
crypto ca certificate chain name
name
Mode
Global configuration:
Next Mode
Certificate chain configuration:
Example
This command acquires Certificate Chain mode in which a certificate can be added or removed.
Note that the script prompts you to remove the certificate:
XSR(config)#crypto ca certificate chain ACMEca
XSR(config-cert-chain)#no certificate 0123456789ABCDEF0123456789ABCDEF
% Are you sure you want to remove the certificate [yes/no]? yes
% Be sure to ask the CA administrator to revoke this certificate.
XSR(config)#
no certificate
commands. If you issue this command, you should also:
CA name. Use the same name you declared using
XSR(config)#
XSR(config-cert-chain)#
Other Certificate Commands
crypto ca enroll
certificate
command.
crypto ca identity
.
XSR CLI Reference Guide 14-91
.
Advertisement
Table of Contents
