Cisco Catalyst 2960 Series, Configuration Manual

Page: 1223 / 2288

C H A P T E R
49
Certification Authority Interoperability
This chapter describes how to configure certification authority (CA) interoperability, which is provided in
support of the IPSec protocol. CA interoperability permits Cisco IOS devices and CAs to communicate so
that your Cisco IOS device can obtain and use digital certificates from the CA. Although IPSec can be
implemented in your network without the use of a CA, using a CA provides manageability and scalability
for IPSec.
• Finding Feature Information, page 1141
• Prerequisites For Certification Authority, page 1141
• Restrictions for Certification Authority, page 1142
• Information About Certification Authority, page 1142
• How to Configure Certification Authority, page 1145
• Monitoring and Maintaining Certification Authority, page 1153
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and
feature information, see Bug Search Tool and the release notes for your platform and software release. To
find information about the features documented in this module, and to see a list of the releases in which each
feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support.
To access Cisco Feature Navigator, go to
http://www.cisco.com/go/cfn . An account on Cisco.com is not
required.
Prerequisites For Certification Authority
You need to have a certification authority (CA) available to your network before you configure this
interoperability feature. The CA must support the Public Key Infrastructure (PKI) protocol, and the Simple
Certificate Enrollment Protocol (SCEP) .
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1141