Cisco CRS User Manual

• query url, on page 215command—The directory server URL in which the Certificate Revocation List
(CRL) is published. Only a string that begins with “ldap://” is accepted.
Required only if your CA supports Lightweight Directory Access Protocol (LDAP).
• rsakeypair, on page 217command—The named Rivest, Shamir, and Adelman (RSA) key pair for this
trustpoint.
• serial-number (trustpoint), on page 218command—Router serial number in the certificate request.
• sftp-password (trustpoint), on page 220command—FTP secure password.
• sftp-username (trustpoint), on page 222command—FTP secure username.
• subject-name (trustpoint), on page 224command—Subject name in the certificate request.
Task ID
OperationsTask ID
executecrypto
Examples
The following example shows how to use the crypto ca trustpoint command to create a trustpoint:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# crypto ca trustpoint msiox
RP/0/RP0/CPU0:router(config-trustp)# sftp-password xxxxxx
RP/0/RP0/CPU0:router(config-trustp)# sftp-username tmordeko
RP/0/RP0/CPU0:router(config-trustp)# enrollment url
sftp://192.168..254.254/tftpboot/tmordeko/CAcert
RP/0/RP0/CPU0:router(config-trustp)# rsakeypair label-2
Related Commands
DescriptionCommand
Allows the certificates of other peers to be accepted
without trying to obtain the appropriate CRL.
crl optional (trustpoint), on page 186
Specifies how many times a router resends a
certificate request.
enrollment retry count, on page 206
Specifies the wait period between certificate request
retries.
enrollment retry period, on page 208
Specifies the URL of the CA.enrollment url, on page 211
Specifies the LDAP URL of the CRL distribution
point.
query url, on page 215
Specifies a named RSA key pair for this trustpoint.rsakeypair, on page 217
Secures the FTP password.sftp-password (trustpoint), on page 220
Secures the FTP username.sftp-username (trustpoint), on page 222
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 195
Public Key Infrastructure Commands
crypto ca trustpoint

Cisco CRS Specifications

General

Operating System	Cisco IOS XR
Product Type	Core Router
Form Factor	Modular Chassis
Dimensions	Varies by chassis type
Weight	Varies by chassis type
Architecture	Distributed
Switch Fabric	Multi-stage
Interface Support	Ethernet, SONET/SDH, OTN
Interfaces/Ports	Varies by line card
Port Density	Varies by line card
Routing Protocol	BGP, IS-IS, OSPF, MPLS
Management	CLI, SNMP
Power Supply	Redundant, hot-swappable
Cooling	Redundant, Hot-swappable Fan Trays
Supported Protocols	IPv4, IPv6, MPLS
Management Interfaces	Ethernet, console
Security Features	ACLs