Cisco Cisco ASR 5000
Global Configuration Mode Commands (A-K)
certificate ▀
Command Line Interface Reference, StarOS Release 18 ▄
5321
certificate
Configures and selects an X.509 Trusted Author certificate.
Product
All IPSec-related products
Privilege
Administrator, Security Administrator, Operator
Mode
Exec > Global Configuration
configure
Entering the above command sequence results in the following prompt:
[local]host_name(config)#
Syntax
certificate name name { der url url | pem { data pemdata | url url } private-key pem { [
encrypted ] data pemdata | url url [cert-enc] [cert-hash-url url url ] } }
encrypted ] data pemdata | url url [cert-enc] [cert-hash-url url url ] } }
no certificate name name
no
Disables certificate.
name
name
Names the certificate.
name
must be from 1 to 128 alphanumeric characters.
der url
Specifies that the Distinguished Encoding Rules (DER) binary format is to be used.
pem
Specifies that the Privacy-enhanced Electronic Mail (PEM) format is to be used.
data
pemdata
Certificate/private key data in PEM format.
pemdata
must be an alphanumeric string of 1 through 4095 (if
private key is not implmented) or 1 through 8191 (if private key is implemented) characters.
cert-enc
Specifies a certificate encoding type other than default encoding type.
cert-hash-url
Specifes a hash and URL of the X.509 Certificate.
url
url
Specifies the Universal Resource Locator (URL) of the file containing certificate/private key.