C613-50170-01 Rev B
Command Reference for x510 Series
1954
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
P
UBLIC
K
EY
I
NFRASTRUCTURE
C
OMMANDS
CRYPTO
PKI
ENROLL
crypto pki enroll
Overview
Use this command to enroll the local server to the specified trustpoint.
Use the
no
variant of this command to de-enroll the server by removing its
certificate
Syntax
crypto pki enroll <
trustpoint
>
no crypto pki enroll <
trustpoint
>
Mode
Privileged Exec
Usage
For the local server, “enrollment” is the process of creating of a certificate for the
server that has been signed by a CA associated with the trustpoint. The public
portion of the RSA key pair specified using the rsakeypair parameter for the
trustpoint will be included in the server certificate.
If the trustpoint represents a locally self-signed certificate authority, then this
command results in the direct generation of the server certificate, signed by the
root CA for the trustpoint.
If the trustpoint represents an external certificate authority, then this command
results in the generation of a Certificate Signing Request (CSR) file, which is
displayed at the terminal in Privacy-Enhanced Mail (PEM) format, suitable for
copying and pasting into a file or message. The CSR must be sent to the external
CA for processing. When the CA replies with the signed certificate, that certificate
should be imported using the crypto pki import pem command, to complete the
enrollment process.
The specified trustpoint must already exist, and it must already be authenticated.
Example
To enroll the local server with the trustpoint “example”, use the following
commands:
awplus>
enable
awplus#
crypto pki enroll example
Related
Commands
enrollment (trustpoint configuration mode)
Parameter
Description
<trustpoint>
The name of the trustpoint to be enrolled
