Cisco Cisco ASA 5555-X Adaptive Security Appliance 产品宣传页

이 명령은 로컬 CA 서버 인증서, 키 쌍 및 필요한 데이터베이스 파일을 생성하고 로컬 CA 서버 인증

서 및 키 쌍을 PKCS12 파일 형식으로 보관합니다. 8~65자의 영숫자 비밀번호를 입력하십시오. 최

초 시작 후 비밀번호 입력 화면 없이 로컬 CA를 비활성화할 수 있습니다. 

구성을 저장하여 재부팅하더라도 로컬 CA 인증서와 키 쌍이 손실되지 않게 합니다.

예:

ciscoasa(config)# write memory

다음 예에서는 로컬 CA 서버를 횔성화합니다.

ciscoasa(config)# crypto ca server

ciscoasa(config-ca-server)# no shutdown

% Some server settings cannot be changed after CA certificate generation.

% Please enter a passphrase to protect the private key

% or type Return to exit

Password: caserver

Re-enter password: caserver

Keypair generation process begin. Please wait...

다음은 로컬 CA 서버 컨피그레이션과 상태를 보여주는 샘플 출력입니다.

Certificate Server LOCAL-CA-SERVER:

    Status: enabled

    State: enabled

    Server's configuration is locked (enter "shutdown" to unlock it)

    Issuer name: CN=wz5520-1-16

    CA certificate fingerprint/thumbprint: (MD5)

        76dd1439 ac94fdbc 74a0a89f cb815acc 

    CA certificate fingerprint/thumbprint: (SHA1)

        58754ffd 9f19f9fd b13b4b02 15b3e4be b70b5a83 

    Last certificate issued serial number: 0x6

    CA certificate expiration timer: 14:25:11 UTC Jan 16 2008

    CRL NextUpdate timer: 16:09:55 UTC Jan 24 2007

    Current primary storage dir: flash:

로컬 CA 서버를 구성하려면 다음 단계를 수행합니다.

local ca server 

구성 모드를 시작합니다.

예:

ciscoasa(config)# crypto ca server