Configuring Secure SRST for SCCP and SIP
How to Configure Secure Unified SRST
191
Cisco Unified SCCP and SIP SRST System Administrator Guide
OL-13143-04
DETAILED STEPS
What to Do Next
For manual enrollment instructions, see the
Manual Certificate Enrollment (TFTP and Cut-and-Paste)
feature.
Verifying Certificate Enrollment
If you used the Cisco IOS certificate server as your CA, use the
show running-config
command to verify
certificate enrollment or the
show crypto pki server
command to verify the status of the CA server.
SUMMARY STEPS
1.
show running-config
2.
show crypto pki server
Command or Action
Purpose
Step 1
crypto pki server
cs-label
Example:
Router (config)# crypto pki server srstcaserver
Enables the certificate server and enters certificate server
configuration mode.
Note
If you manually generated an RSA key pair, the
cs-label
argument must match the name of the key
pair.
Step 2
shutdown
Example:
Router (cs-server)# shutdown
Disables the Cisco IOS certificate server.
Step 3
no grant auto
Example:
Router (cs-server)# no grant auto
Disables automatic certificates to be issued to any
requestor.
•
This command was for use during enrollment only and
thus needs to be removed in this task.
Step 4
no shutdown
Example:
Router (cs-server)# no shutdown
Enables the Cisco IOS certificate server.
•
You should issue this command only after you have
completely configured your certificate server.
