HP 7000 dl Router manual Enrollment url url

SROS Command Line Interface Reference Guide CA Profile Configuration Command Set

enrollment url <url>

Use the enrollment url command to specify the URL of the CA where the Secure Router OS should send certificate requests.

Syntax Description

<url>	Enter the certificate authority’s URL (e.g.,
	http://10.10.10.1:400/abcdefg/pkiclient.exe).

Default Values

No defaults necessary for this command.

Command Modes

(ca-profile)# CA Profile Configuration

Functional Notes

When entering the URL http:// is required, followed by the IP address or DNS name of the CA. If the port number is something other than 80, include it after the IP address or DNS name separated with a colon (:).

The CA may have other necessary information to include in the CGI path before ending with the actual CGI program. An example template to follow is http://hostname:port/path/to/program.exe.

NOTE: To use the default program pkiclient.exe without specifying it, end the URL with a slash (/). Otherwise, you must enter the program name to use. For example, http://10.10.10.1:400/abcdefg/ will assume pkiclient.exe as the program (but not including the terminating slash is a configuration error).

Specifying this command will override the enrollment terminal setting as described previously (see enrollment terminal on page 422).

Usage Examples

The following example specifies http://CAserver/certsrv/mscep/mscep.dll as the URL to which the Secure Router OS will send certificate requests:

(ca-profile)#enrollment url http://CAserver/certsrv/mscep/mscep.dll

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 423