The following example shows that the router requests the CA certificate:
RP/0/RP0/CPU0:router# crypto ca authenticate msiox
Retrieve Certificate from SFTP server? [yes/no]: yes
Read 860 bytes as CA certificate
Serial Number : 06:A5:1B:E6:4F:5D:F7:83:41:11:D5:F9:22:7F:95:23
Subject:
Name: CA2
CN= CA2
Issued By :
cn=CA2
Validity Start : 07:51:51 UTC Wed Jul 06 2005
Validity End : 08:00:43 UTC Tue Jul 06 2010
CRL Distribution Point
http://10.56.8.236/CertEnroll/CA2.crl
Certificate has the following attributes:
Fingerprint: D0 44 36 48 CE 08 9D 29 04 C4 2D 69 80 55 53 A3
Do you accept this certificate? [yes/no]: yes
RP/0/RP0/CPU0:router#:Apr 10 00:28:52.324 : cepki[335]: %SECURITY-CEPKI-6-INFO : certificate
database updated
Do you accept this certificate? [yes/no] yes
Related Commands
DescriptionCommand
Configures a trusted point with a selected name.crypto ca trustpoint, on page 194
Displays information about your certificate and the
certificate of the CA.
show crypto ca certificates, on page 226
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 189
Public Key Infrastructure Commands
crypto ca authenticate