Chapter19 Public Key Infrastructure
Enrollment Task
19-10
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
After you have submitted the enrollment request to the CA server manually, and
received the CA server certificate and the certificate for your router, you must
start the Cut and Paste wizard again to complete the enrollment and import the
certificates to the router.
Enrollment Task
Specify whether you are beginning a new enrollment or you are resuming an
enrollment with an enrollment request that you saved to the PC.

Begin New Enrollment

Click Begin new enrollment to generate a trustpoint, an RSA key pair and an
enrollment request that you can save to your PC and send to the CA server. The
wizard completes after you save the enrollment request. To complete the
enrollment after you have receive the CA server certificate and the certificate for
your router, re-enter the Cut and Paste wizard and select Continue with an
unfinished enrollment.

Continue with an unfinished enrollment

Click this button to resume an enrollment process. You can import certificates you
have received from the CA server, and you can generate a new enrollment request
for a trustpoint if you need to.
Enrollment Request
This window displ ays the base-64-encoded PKCS#10-type enrollment r equest that
the router has generated. Save the enrollment request to the PC. Then, send it to
the CA to obtain your certificate.

Save:

Browse for the directory on the PC that you want to save the enrollment request
text file in, enter a name for the file, and click Save.