Cisco IOS XR User Manual

SC-1
Cisco IOS XR System Security Configuration Guide
Implementing Certification Authority
Interoperability on Cisco IOS XR Software
Certification authority (CA) interoperability is provided in support of the IP Security (IPSec), Secure
Socket Layer (SSL), and Secure Shell (SSH) protocols. CA interoperability permits Cisco IOS XR
devices and CAs to communicate so that your Cisco IOS XR device can obtain and use digital
certificates from the CA. Although IPSec can be implemented in your network without the use of a CA,
using a CA provides manageability and scalability for IPSec.
This module describes the tasks that you need to implement CA interoperability on your Cisco IOS XR
network.
Note For a complete description of the public key infrastructure (PKI) commands used in this chapter, refer
to the Public Key Infrastructure Commands on Cisco IOS XR Software module of the Cisco IOS XR
System Security Command Reference. To locate documentation for other commands that appear in this
chapter, use the command reference master index, or search online.
Feature History for Implementing Certification Authority Interoperability on Cisco IOS XR Software
Contents
• Prerequisites for Implementing Certification Authority, page SC-2
• Restrictions for Implementing Certification Authority, page SC-2
• Information About Implementing Certification Authority, page SC-2
• How to Implement CA Interoperability, page SC-5
Release Modification
Release 2.0 This feature was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 Support was added for the Cisco XR 12000 Series Router.
Release 3.3.0 No modification.
Release 3.4.0 A procedure was added on how to declare the trustpoint certification
authority (CA) for both the Cisco CRS-1 and
Cisco XR 12000 Series Router.
Release 3.5.0 No modification.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.