crypto ca lookup
To specify the cert-store to be used for certificate authentication, use the crypto ca lookup command.
crypto ca lookup {local| remote| both}
Syntax Description
Specifies the local cert-store for certificate
authentication.
local
Specifies the remote cert-store for certificate
authentication.
remote
Specifies the local cert-store for certificate
authentication, but if the authentication fails or the
CA certificate is not found, the remote cert-store is
used.
both
Command Default
Local
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.5.0(2)
Usage Guidelines
If you plan to configure a remote cert-store, you must set up an LDAP server in a remote device and make
sure that the CA certificates that are used for authentication are loaded to the Active Directory.
This command does not require a license.
Examples
This example shows how to specify the remote cert-store for certificate authentication:
switch(config)# crypto ca lookup remote
Related Commands
DescriptionCommand
Configures the refresh time to update the certificate
revocation list from the remote cert-store.
crypto ca remote ldap crl-refresh-time
Cisco Nexus 7000 Series Security Command Reference
132
C Commands
crypto ca lookup
To Next Page
Loading...
