Example 205 Authenticating the CA

NewYork#configure terminal

NewYork(config)#crypto ca authenticate CA-Server

Step 7.

Request your certificate. The router must request a certificate from the CA server with the crypto ca enroll command. This command requests certificates from the CA for all the router RSA key pairs. The router sends the key pairs to the CA server, which generates and signs the identity certificates. Finally, the CA server sends the identity certificates back to the router and posts a copy in its public repository. Example 20-6 shows the correct syntax for requesting a certificate from the CA.

0 0

Post a comment