Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 423 / 840

CEP Enrollment
Chapter 9 Authentication 423
8.
Run the appropriate command.
The command will ask you for certain information:
The CA’s identity. You specified this in Step 3.
Challenge password. If you enter one, write it down; you will be required to
specify this password to revoke the certificate.
The CEP enrollment URL.
Whether you want to include the router’s serial number in the request. If you
choose to include the serial number, it will be included in the certificate’s
subject name.
Whether you want to include the router’s IP address in the request. If you
choose to include the IP address, it will be included in the certificate’s subject
name.
9.
If the CA to which the router submitted the request employs automatic
enrollment (or authentication) for routers, the request will get processed by the
CA. The CA may return the certificate to the router in the same transaction. If it
doesn’t, the router checks with the CA at periodic intervals; in the router
configuration you can specify how often the router should poll the CA for the
certificate and how many attempts it should make. By default, the router
checks the CA every minute.
10.
If the CA to which you submitted the request is configured for agent-approved
enrollment (or authentication), the request gets queued and awaits approval by
an agent.
Example
The example below shows the commands and associated outputs for a Cisco
router:
# To perform certificate enrollment for a router using CEP, you must be
# in privileged mode, which you do by typing “enable” first, and then
# entering the password.
NOTE
Your router may require additional configuration changes. Be sure
to follow the information in your router documentation.