Cisco 8821 - Page 181

Cisco Wireless IP Phone 8821 and 8821-EX Wireless LAN Deployment Guide
181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-----END CERTIFICATE-----
Trustpoint 'MIC_trustpoint' is a subordinate CA and holds a non self-signed cert.
Certificate has the following attributes:
Fingerprint MD5: AC14F08F C3780F8F D9EEE6C9 39111280
Fingerprint SHA1: 90B2E06B 7AD5DAFF CFD43187 2909F381 37471BF8
% Do you accept this certificate? [yes/no]: yes
Trustpoint CA certificate accepted.
% Certificate successfully imported
ISR_RA(config)# exit
• Configure a PKI trustpoint and PKI server to enroll to the CA server.
ISR_RA# configure terminal
ISR_RA(config)# crypto pki trustpoint MSCA
ISR_RA(ca-trustpoint)# enrollment mode ra
ISR_RA(ca-trustpoint)# enrollment url http://10.81.116.249/certsrv/mscep/mscep.dll
ISR_RA(ca-trustpoint)# serial-number
ISR_RA(ca-trustpoint)# fingerprint 81512B4316429092925C6891701B374EBD254447
ISR_RA(ca-trustpoint)# revocation-check none
ISR_RA(ca-trustpoint)# rsakeypair MSCA_Key 2048
ISR_RA(ca-trustpoint)# exit
ISR_RA(config)# crypto pki server MSCA
ISR_RA(cs-server)# grant auto trustpointMIC_trustpoint
ISR_RA(cs-server)# hash sha1
ISR_RA(cs-server)# mode ra transparent
ISR_RA(cs-server)# no shutdown
%Some server settings cannot be changed after CA certificate generation.
% Please enter a passphrase to protect the private key
% or type Return to exit
Password:
Re-enter password:
% Generating 2048 bit RSA keys, keys will be non-exportable...
[OK] (elapsed time was 22 seconds)
Certificate has the following attributes:
Fingerprint MD5: CDE40276 04A28DA8 BDE5DF48 0BC1A8F7
Fingerprint SHA1: 81512B43 16429092 925C6891 701B374 EBD254447
Trustpoint Fingerprint: AE5CDEF2 A633DEF4 1D5A5104 7D6A8BD7 E08B576C
Certificate validated - fingerprints matched.