crypto ca crl request
To configure a new certificate revocation list (CRL) downloaded from the certificate authority (CA), use the
crypto ca crl request command.
crypto ca crl request trustpoint-label source-file
Syntax Description
Name of the trustpoint. The maximum size is 64
characters.
trustpoint-label
Location of the CRL in the form bootflash:filename
. The maximum size is 512.
source-file
Command Default
None
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.4.1(2)
Usage Guidelines
The crypto ca crl request command allows you to pre-download CRLs for the trustpoints and cache the CRLs
in the certificate (cert) store. The CRL file specified should contain the latest CRL in either the Privacy
Enhanced Mail (PEM) format or Distinguished Encoding Rules (DER) format.
The trustpoint configuration that you create with the crypto ca trustpoint command persists across device
reboots only if you save it explicitly using the copy running-config startup-config command. The certificates
and CRL associated to a trustpoint are automatically persistent when you save the trustpoint configuration in
the startup configuration. Otherwise, if you do not save the trustpoint in the startup configuration, the associated
certificates and CRL are not automatically persistent because they cannot exist without the corresponding
trustpoint after the device reboots.
To ensure that the configured certificates, CRLs and key pairs are persistent, always save the running
configuration in the startup configuration.
This command does not require a license.
Examples
This example shows how to configure a CRL for the trustpoint or replaces the current CRL:
switch# configure teminal
switch(config)# crypto ca crl request admin-ca bootflash:admin-ca.crl
Cisco Nexus 7000 Series Security Command Reference
110
C Commands
crypto ca crl request
To Next Page
Loading...
