Cisco CRS-1 - Carrier Routing System Router Configuration Guide

Implementing Certification Authority Interoperability on Cisco IOS XR Software
Configuration Examples for Implementing Certification Authority Interoperability
SC-75
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Configuration Examples for Implementing Certification
Authority Interoperability
This section provides the following configuration example:
• Configuring Certification Authority Interoperability: Example, page SC-75
Configuring Certification Authority Interoperability: Example
The following example shows how to configure CA interoperability.
Comments are included within the configuration to explain various commands.
configure
hostname myrouter
domain name mydomain.com
end
Uncommitted changes found, commit them? [yes]:yes
crypto key generate rsa mykey
The name for the keys will be:mykey
Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose
Keypair
Choosing a key modulus greater than 512 may take a few minutes.
How many bits in the modulus [1024]:
Generating RSA keys ...
Step 6
crypto ca enroll ca-name
Example:
RP/0/RP0/CPU0:router# crypto ca enroll myca
Obtains the certificates for your router from the CA.
• Use the ca-name argument to specify the name
of the CA. Use the same name that you entered
in Step 2.
Step 7
crypto ca import ca-name certificate
Example:
RP/0/RP0/CPU0:router# crypto ca import myca
certificate
Imports a certificate manually at the terminal.
• Use the ca-name argument to specify the name
of the CA. Use the same name that you entered
in Step 2.
Note You must enter the crypto ca import
command twice if usage keys (signature and
encryption keys) are used. The first time the
command is entered, one of the certificates
is pasted into the router; the second time the
command is entered, the other certificate is
pasted into the router. (It does not matter
which certificate is pasted first.
Step 8
show crypto ca certificates
Example:
RP/0/RP0/CPU0:router# show crypto ca certificates
Displays information about your certificate and the
CA certificate.
Command or Action Purpose

Cisco CRS-1 - Carrier Routing System Router Specifications

General

Brand	Cisco
Model	CRS-1 - Carrier Routing System Router
Category	Network Router
Language	English