Cisco IOS XR User Manual

Implementing Certification Authority Interoperability on Cisco IOS XR Software
How to Implement CA Interoperability
SC-11
Cisco IOS XR System Security Configuration Guide
DETAILED STEPS
Requesting Your Own Certificates
This task requests certificates from the CA.
You must obtain a signed certificate from the CA for each of your router’s RSA key pairs. If you
generated general-purpose RSA keys, your router has only one RSA key pair and needs only one
certificate. If you previously generated special usage RSA keys, your router has two RSA key pairs and
needs two certificates.
SUMMARY STEPS
1. crypto ca enroll ca-name
2. show crypto ca certificates
Command or Action Purpose
Step 1
crypto ca authenticate ca-name
Example:
RP/0/RP0/CPU0:router# crypto ca authenticate
myca
Authenticates the CA to your router by obtaining a CA
certificate, which contains the public key for the CA.
Step 2
show crypto ca certificates
Example:
RP/0/RP0/CPU0:router# show crypto ca
certificates
(Optional) Displays information about the CA certificate.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.