Cisco 8861 - Page 185

Cisco IP Phone 8861 and 8865 Wireless LAN Deployment Guide
185
Feb 17 15:21:48: %PKI-6-CS_ENABLED: Certificate server now enabled.
ISR_RA(cs-server)# end
SCEP RA Sample Configuration
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname SCEP-RA
!
boot-start-marker
boot system flash c3845-advsecurityk9-mz.151-4.M10.bin
boot-end-marker
!
enable password <REMOVED>
!
aaa new-model
!
aaa authentication login default local
aaa authorization network PhoneList group radius
!
aaa session-id common
!
dot11 syslog
ip source-route
!
ip cef
!
no ip domain lookup
!
multilink bundle-name authenticated
!
crypto pki server MSCA
grant auto trustpoint MIC_trustpoint
hash sha1
mode ra transparent
crypto pki token default removal timeout 0
!
crypto pki trustpoint MIC_trustpoint
enrollment terminal
revocation-check none
authorization list PhoneList
authorization username subjectname commonname
!
crypto pki trustpoint MSCA
enrollment mode ra
enrollment url http://10.81.116.249:80/certsrv/mscep/mscep.dll
serial-number
fingerprint 81512B4316429092925C6891701B374EBD254447
revocation-check none
rsakeypair MSCA_Key 2048
!
crypto pki certificate chain MIC_trustpoint
certificate ca 02