AudioCodes Mediant 500L MSBR, Configuration Manual

Page: 41 / 74

Configuration Guide 7. IPSec Tunneling
Version 7.2 41 Security Setup
7.1.3.1.2 Root Certificate or Chain Certificates
When importing CA certificate or CA chain certificates, you must first import a root CA
certificate, then child certificates. All certificate manipulations must be performed using CLI
under the PKI (public key infrastructure) configuration section.
1.
Enter the following commands:
Configure data
crypto isakmp pki 0
The relevant available commands in the PKI section are shown in the table below:
Table 7-2: Root Certificate or Chain Certificates
Command Sub-commands Description
certificate -
Imports device certificate.
certificate create-self-signed
Creates a self-signed certificate.
delete
Deletes certificate.
detail
Displays certificates.
export
Exports certificates.
import
Imports certificates.
signing-request
Generates signing requests.
status
Displays current certificate status.
subject
Configures subject name for CSRs and new
certificates.
trusted-root -
Imports root certificate.
trusted-root clear-and-import
Clears Trusted Root certificates and imports
new ones in textual PEM format.
delete
Deletes an individual Trusted Root certificate.
detail
Details of a specific root certificate, by
number.
export
Exports individual Trusted Root certificate.
import
Imports Trusted Root certificate, in textual
PEM format.
summary
Summary of Trusted Root certificates.
private-key
Local private key manipulation.
delete
Deletes current private key (use with
caution).
generate
Generates new private key and self-signed
certificate.