Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

신뢰 지점이 나타내는 CA로부터 base64 인코딩 CA 인증서를 이미 취득한 상태임을 전제로 합니다.
수동으로 인증서를 취득하려면 다음 단계를 수행합니다.

구성된 신뢰 지점에 대한 CA 인증서를 가져옵니다. 

예:

ciscoasa(config)# crypto ca authenticate Main

Enter the base 64 encoded CA certificate.

End with a blank line or the word "quit" on a line by itself

MIIDRTCCAu+gAwIBAgIQKVcqP/KW74VP0NZzL+JbRTANBgkqhkiG9w0BAQUFADCB

/7QEM8izy0EOTSErKu7Nd76jwf5e4qttkQ==

INFO: Certificate has the following attributes:

Fingerprint:     24b81433 409b3fd5 e5431699 8d490d34 

Do you accept this certificate? [yes/no]: y

Trustpoint CA certificate accepted.

% Certificate successfully imported

신뢰 지점에서 인증서의 수동 취득을 요구할지는 신뢰 지점 구성 시 enrollment terminal 명령을 

사용하여 결정합니다. 

ASA

를 신뢰 지점에 등록합니다.

예:

ciscoasa(config)# crypto ca enroll Main

% Start certificate enrollment .. 

% The fully-qualified domain name in the certificate will be: 

securityappliance.example.com

% Include the device serial number in the subject name? [yes/no]: n

Display Certificate Request to terminal? [yes/no]: y

Certificate Request follows:

MIIBoDCCAQkCAQAwIzEhMB8GCSqGSIb3DQEJAhYSRmVyYWxQaXguY2lzY28uY29t

jF4waw68eOxQxVmdgMWeQ+RbIOYmvt8g6hnBTrd0GdqjjVLt

---End - This line not part of the certificate request---

Redisplay enrollment request? [yes/no]: n