Cisco CP-7911G-CH1 System Administrator Manual page 189

Configuring Secure SRST for SCCP and SIP
5.
6.
DETAILED STEPS
Command or Action
Step 1
crypto pki trustpoint name
Example:
Router(config)# crypto pki trustpoint srstca
Step 2
enrollment url url
Example:
Router(ca-trustpoint)# enrollment url
http://10.1.1.22
Step 3
revocation-check method1
Example:
Router(ca-trustpoint)# revocation-check none
Step 4
exit
Example:
Router(ca-trustpoint)# exit
Step 5
crypto pki authenticate name
Example:
Router(config)# crypto pki authenticate srstca
Step 6
crypto pki enroll name
Example:
Router(config)# crypto pki enroll srstca
OL-13143-04
crypto pki authenticate name
crypto pki enroll name
Purpose
Declares the CA that your router should use and enters
ca-trustpoint configuration mode.
The name provided will be the same as the trustpoint
•
name that will be declared in the
Service on the Secure Cisco Unified SRST Router"
section on page 193.
Specifies the enrollment parameters of your CA.
url url: Specifies the URL of the CA to which your
•
router should send certificate requests.
If you are using Cisco proprietary SCEP for enrollment,
•
url must be in the form http://CA_name, where
CA_name is the host Domain Name System (DNS)
name or IP address of the Cisco IOS CA.
If you used the procedure documented in the
•
"Configuring a Certificate Authority Server on a Cisco
IOS Certificate Server" section on page
is the IP address of the certificate server router
configured in Step 1. If a third-party CA was used, the
IP address is to an external CA.
Checks the revocation status of a certificate. The argument
method1 is the method used by the router to check the
revocation status of the certificate. For this task, the only
available method is none. The keyword none means that a
revocation check will not be performed and the certificate
will always be accepted.
Using the none keyword is mandatory for this task.
•
Exits ca-trustpoint configuration mode and returns to global
configuration mode.
Authenticates the CA (by getting the certificate from the
CA).
Takes the name of the CA as the argument.
•
Obtains the SRST router certificate from the CA.
• Takes the name of the CA as the argument.
Cisco Unified SCCP and SIP SRST System Administrator Guide
How to Configure Secure Unified SRST
"Enabling Credentials
186, the URL
189