How to Implement CA Interoperability
DETAILED STEPS
Command or Action
Step 1
crypto ca authenticate ca-name
Example:
RP/0/RP0/CPU0:router# crypto ca authenticate
myca
Step 2
show crypto ca certificates
Example:
RP/0/RP0/CPU0:router# show crypto ca
certificates
Requesting Your Own Certificates
This task requests certificates from the CA.
You must obtain a signed certificate from the CA for each of your router's RSA key pairs. If you
generated general-purpose RSA keys, your router has only one RSA key pair and needs only one
certificate. If you previously generated special usage RSA keys, your router has two RSA key pairs and
needs two certificates.
SUMMARY STEPS
1.
2.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-72
crypto ca enroll ca-name
show crypto ca certificates
Implementing Certification Authority Interoperability on Cisco IOS XR Software
Purpose
Authenticates the CA to your router by obtaining a CA
certificate, which contains the public key for the CA.
(Optional) Displays information about the CA certificate.
OL-20382-01