Chapter 2 Commands for the Catalyst 6500 Series Switch WebVPN Module
crypto pki certificate
crypto pki certificate
To configure and define the PKI implementation on the WebVPN Services Module, use the crypto pki certificate command.
|
| crypto pki certificate {chain name map map_name query validate | |
|
|
|
|
Syntax Description |
| chain | Identifies certificates. |
|
|
|
|
|
| name | CA server name. |
|
|
|
|
|
| map | Defines certificate attributes map. |
|
|
|
|
|
| map_name | CA map tag name. |
|
|
|
|
|
| query | Obtains certificates from the CA after reboot. |
|
|
|
|
|
| validate | Validates a certificate chain. |
|
|
|
|
|
| Trustpoint label name. | |
|
|
|
|
Defaults
Command Modes
Command History
Usage Guidelines
This command has no default settings.
Global configuration
Release | Modification |
WebVPN Module | Support for this command was introduced on the Catalyst 6500 series |
Release 1.1 | switches. |
|
|
The crypto pki certificate chain command puts you into certificate chain configuration mode. When you are in certificate chain configuration mode, you can delete certificates using the certificate command. You need to be in certificate chain configuration mode to delete certificates.
The crypto pki certificate validate command validates the router's own certificate for a given trustpoint. Use this command as a sanity check after enrollment to verify that the trustpoint is properly authenticated, a certificate has been requested and granted for the trustpoint, and that the certificate is currently valid. A certificate is valid if it is signed by the trustpoint certification authority (CA), not expired, and so on.
Catalyst 6500 Series Switch WebVPN Module Command
| ||
|
