20-9
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter20 Ce rtificate Authority Serve r
Manage CA Server
CA Server will automatically generate RSA key pair with following
defaults:-
Modulus:1024
Type of Key:General Purpose
Exportable Key:No
Passphrase configured:******
------------------------------------------------------------
Firewall Pass-through ACEs for Interface(s):
------------------------------------------------------------
FastEthernet0/0
permit tcp host 192.27.108.92 eq www host 192.27.108.91 gt 1024
The summary display contains four sections, the CA Server Configuration
section, the CA Server Advanced Configuration section, the RSA Keys section,
and the Firewall Pass-through section. The name of this CA server is CAsvr-a.
Certificates will be manually granted. Certificate information will be stored in
nvram, in PEM format. SDM will generate a general-purpose key pair with the
default modulus 1024. The key will not be exportable. an ACE will be configured
to allow traffic to between the router and the CDP host with the IP address
192.27.108.92.
Manage CA Server
You can start and stop the CA server from this window, grant and reject certificate
requests, and revoke certificates. If you need to change the CA server
configuration, you can uninstall the server from this window and return to the
Create CA Server window to create the server configuration that you need.
Name
Displays the name of the server. The name of the server was created when the
server was created.

Status Icon

If the CA server is running, the word Running and a green icon is displayed. If the
CA server is not running, the word Stopped and a red icon is displ ayed.