Support User Manuals

Enterasys Networks XSR CLI Router User Manual

Open as PDF

of 684

Other Certificate Commands

XSR CLI Reference Guide 14-91

Mode

Globalconfiguration:XSR(config)#

Sample Output

Thefollowingscriptpromptsyoutoacceptthecertificate.

XSR#crypto ca authenticate ACMEca

Certificate has the following attributes:

Fingerprint: 0123 4567 89AB CDEF 0123

Do you accept this certificate? [yes/no] y

crypto ca certificate chain

ThiscommandinvokesCertificateChainmode.Inthismode,youcandeleteacertificateby

enteringthe

no certificatecommands.Ifyouissuethiscommand,youshouldalso:

•AsktheCAadministratortorevokeXSRʹscertificatesattheCA;youmustsupplythe

challengepasswordyoucreatedwhenyoufirstgotthecertificateswith

crypto ca enroll.

•RemovetheXSRʹscertificatesfromtheconfigurationusingthe

certificatecommand.

Syntax

crypto ca certificate chain name

Mode

Globalconfiguration:XSR(config)#

Next Mode

Certificatechainconfiguration:XSR(config-cert-chain)#

Example

ThiscommandacquiresCertificateChainmodeinwhichacertificatecanbeaddedorremoved.

Notethatthescriptpromptsyoutoremovethecertificate:

XSR(config)#crypto ca certificate chain ACMEca

XSR(config-cert-chain)#no certificate 0123456789ABCDEF0123456789ABCDEF

% Are you sure you want to remove the certificate [yes/no]? yes

% Be sure to ask the CA administrator to revoke this certificate.

name

CAname.Usethesamenameyoudeclaredusingcrypto ca identity.

previous next