Cisco Catalyst 2960 Series

PurposeCommand or Action
Exit CA trustpoint configuration mode and returns to
privileged EXEC mode.
end
Example:
Device(ca-trustpoint)# end
Step 12
Configuring a Root CA (Trusted Root)
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
crypto ca trustpoint name
4.
revocation-check method1 [method2 method3]
5.
root tftp server-hostname filename
6.
enrollment http-proxy hostname port-number
7.
end
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode.enable
Example:
Device> enable
Step 1
•
Enter your password if prompted.
Enters global configuration mode.configure terminal
Example:
Device# configure terminal
Step 2
Declares the trustpoint that your device should use and
enters CA trustpoint configuration mode.
crypto ca trustpoint name
Example:
Device(config)# crypto ca trustpoint ka
Step 3
Checks the revocation status of a certificate.
revocation-check method1 [method2 method3]
Example:
Device(ca-trustpoint)# revocation-check ocsp
Step 4
Obtains the certification authority (CA) certificate via
TFTP.
root tftp server-hostname filename
Example:
Device(ca-trustpoint)# root tftp server1 file1
Step 5
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1150
How to Configure Certification Authority