C613-50170-01 Rev B
Command Reference for x510 Series
1964
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
P
UBLIC
K
EY
I
NFRASTRUCTURE
C
OMMANDS
ENROLLMENT
(
TRUSTPOINT
CONFIGURATION
MODE
)
enrollment (trustpoint configuration mode)
Overview
Use this command to declare how certificates will be added to the system for the
current trustpoint.
Syntax
enrollment {selfsigned|terminal}
Mode
Trustpoint Configuration
Usage
If the enrollment is set to
selfsigned
, then the system will generate a root CA
certificate and its associated key when the
crypto pki authenticate
command is
issued. It will generate a server certificate (signed by the root CA certificate) when
the
crypto pki enroll
command is issued.
If the enrollment is set to
terminal
, then the system will prompt the user to paste
the root CA certificate Privacy Enhanced Mail (PEM) file at the terminal, when the
crypto pki authenticate
command is issued. It will create a Certificate Signing
Request (CSR) file for the local server when the
crypto pki enroll
command is
issued. The server certificate received from the external CA should be imported
using the
crypto pki import pem
command.
The trustpoint named “local” may only use the
selfsigned
enrollment setting.
If no enrollment mode is specified, the
crypto pki authenticate
command will fail
for the trustpoint.
Example
To configure the trustpoint named "example" and set its enrollment to
selfsigned
,
use the following commands:
awplus>
enable
awplus#
configure terminal
awplus(config)#
crypto pki trustpoint example
awplus(ca-trustpoint)#
enrollment selfsigned
Related
Commands
Parameter
Description
selfsigned
Sets the enrollment mode for the current trustpoint to selfsigned.
terminal
Sets the enrollment mode for the current trustpoint to terminal.
