Cisco IOS XR

Implementing Certification Authority Interoperability on Cisco IOS XR Software
How to Implement CA Interoperability
SC-11
Cisco IOS XR System Security Configuration Guide
DETAILED STEPS
Requesting Your Own Certificates
This task requests certificates from the CA.
You must obtain a signed certificate from the CA for each of your router’s RSA key pairs. If you
generated general-purpose RSA keys, your router has only one RSA key pair and needs only one
certificate. If you previously generated special usage RSA keys, your router has two RSA key pairs and
needs two certificates.
SUMMARY STEPS
1. crypto ca enroll ca-name
2. show crypto ca certificates
Command or Action Purpose
Step 1
crypto ca authenticate ca-name
Example:
RP/0/RP0/CPU0:router# crypto ca authenticate
myca
Authenticates the CA to your router by obtaining a CA
certificate, which contains the public key for the CA.
Step 2
show crypto ca certificates
Example:
RP/0/RP0/CPU0:router# show crypto ca
certificates
(Optional) Displays information about the CA certificate.