Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 478)

100

101

29-12

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 29 Configuring Certificates

Certificate Configuration

The following example manually imports a certificate for the trustpoint Main:

hostname (config)# crypto ca import Main certificate

% The fully-qualified domain name in the certificate will be:

securityappliance.example.com

Enter the base 64 encoded certificate.

End with a blank line or the word “quit” on a line by itself

[ certificate data omitted ]

quit

INFO: Certificate successfully imported

hostname (config)#

Step 6 Verify that the enrollment process was successful using the show crypto ca certificate command. For

example, to show the certificate received from trustpoint Main:

hostname/contexta(config)# show crypto ca certificate Main

The output of this command shows the details of the certificate issued for the security appliance and the

CA certificate for the trustpoint.

Step 7 Save the configuration using the write memory command:

hostname/contexta(config)# write memory

Configuring CRLs for a Trustpoint

If you want to use mandatory or optional CRL checking during certificate authentication, you must

perform CRL configuration for each trustpoint. For more information about CRLs, see the “About

CRLs” section on page 29-3.

To configure CRLs for a trustpoint, perform the following steps:

Step 1 Enter Crypto ca trustpoint configuration mode for the trustpoint whose CRL configuration you want to

modify. To do so, enter the crypto ca trustpoint command.

Step 2 If you have not already enabled CRLs, you can do so now by using the crl command with either the

required or optional keyword. If you specify the required keyword, certificate authentication with this

trustpoint cannot succeed if the CRL is unavailable.

Step 3 Enter the crl configure command.

hostname/contexta(config-ca-trustpoint)# crl configure

hostname/contexta(config-ca-crl)#

Upon entering this command, you enter the crl configuration mode for the current trustpoint.

Tip To set all CRL configuration options to their default values, use the default command. At any

time while performing CRL configuration, if you want to start over, enter this command and

restart this procedure.

1 2 ... 473 474 475 476 477 478 479 480 481 482 483 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 478

Kommentare zu diesen Handbüchern