Cisco Catalyst 2960 Series, Configuration Manual

Page: 1232 / 2288

Purpose Command or Action
Exit CA trustpoint configuration mode and returns to
privileged EXEC mode. end
Example:
Device(ca-trustpoint)# end
Step 12
Configuring a Root CA (Trusted Root)
SUMMARY STEPS
1.
enable
2. configure terminal
3.
crypto ca trustpoint name
4.
revocation-check method1
[ method2 method3 ]
5. root tftp server-hostname filename
6.
enrollment http-proxy hostname port-number
7. end
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode.
enable
Example:
Device> enable
Step 1
• Enter your password if prompted.
Enters global configuration mode. configure terminal
Example:
Device# configure terminal
Step 2
Declares the trustpoint that your device should use and
enters CA trustpoint configuration mode.
crypto ca trustpoint name
Example:
Device(config)# crypto ca trustpoint ka
Step 3
Checks the revocation status of a certificate. revocation-check method1 [ method2 method3 ]
Example:
Device(ca-trustpoint)# revocation-check ocsp
Step 4
Obtains the certification authority (CA) certificate via
TFTP. root tftp server-hostname filename
Example:
Device(ca-trustpoint)# root tftp server1 file1
Step 5
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1150
How to Configure Certification Authority