https://wiki.frotmail.nl/index.php?action=history&feed=atom&title=Cisco%3A_PKI_SCEP 2026-08-06T03:45:45Z Revision history for this page on the wiki MediaWiki 1.46.0 https://wiki.frotmail.nl/index.php?title=Cisco:_PKI_SCEP&diff=25&oldid=prev 2022-04-04T19:14:56Z

<p>Created page with &quot;=Server= crypto pki server CiscoCA database level complete issuer-name CN=MyCiscoCA,OU=VPN,O=lab,C=NL grant auto hash sha256 lifetime crl 5 lifetime ca-certificate 3650 database url flash:/CiscoCA ! crypto pki trustpoint CiscoCA revocation-check crl rsakeypair CiscoCA ! crypto pki certificate chain CiscoCA certificate ca 01 xxxxxxxx quit ! ip http server =Client= crypto pki trustpoint CiscoCA enrollment url http://192.168.2.77:8...&quot;</p> <p><b>New page</b></p><div>=Server=<br /> crypto pki server CiscoCA<br /> database level complete<br /> issuer-name CN=MyCiscoCA,OU=VPN,O=lab,C=NL<br /> grant auto<br /> hash sha256<br /> lifetime crl 5<br /> lifetime ca-certificate 3650<br /> database url flash:/CiscoCA<br /> !<br /> crypto pki trustpoint CiscoCA<br /> revocation-check crl<br /> rsakeypair CiscoCA<br /> !<br /> crypto pki certificate chain CiscoCA<br /> certificate ca 01<br /> xxxxxxxx<br /> quit<br /> !<br /> ip http server<br /> <br /> =Client=<br /> crypto pki trustpoint CiscoCA<br /> enrollment url http://192.168.2.77:80<br /> usage ike<br /> serial-number<br /> fqdn spoke spoke.frotmail.lan<br /> subject-name CN=spoke1,OU=VPN,O=Frotmail,C=NL<br /> revocation-check crl<br /> auto-enroll<br /> authorization username subjectname all<br /> certificate chain flash:ca.crt<br /> hash sha256<br /> !<br /> crypto pki certificate chain CiscoCA<br /> certificate 02<br /> xxxxxxxx<br /> quit<br /> certificate ca 01<br /> xxxxxxxx<br /> quit<br /> <br /> spoke1(config)#crypto pki authenticate CiscoCA<br /> Certificate has the following attributes:<br /> Fingerprint MD5: 56684161 5F41B059 144AA0CF D2A7BF97<br /> Fingerprint SHA1: 09DD5795 345BAE1C 80AD7B76 8E3AAF04 911359A0<br /> <br /> % Do you accept this certificate? [yes/no]: yes<br /> Trustpoint CA certificate accepted.<br /> spoke1(config)#crypto pki enroll CiscoCA<br /> %<br /> % Start certificate enrollment ..<br /> % Create a challenge password. You will need to verbally provide this<br /> password to the CA Administrator in order to revoke your certificate.<br /> For security reasons your password will not be saved in the configuration.<br /> Please make a note of it.<br /> <br /> Password:<br /> *Apr 13 19:52:52.787: RSA key size needs to be atleast 768 bits for ssh version 2<br /> *Apr 13 19:52:52.787: %SSH-5-ENABLED: SSH 1.5 has been enabled<br /> *Apr 13 19:52:52.787: %CRYPTO-6-AUTOGEN: Generated new 512 bit key pair<br /> Re-enter password:<br /> <br /> % The subject name in the certificate will include: CN=spoke1,OU=VPN,O=Frotmail,C=NL<br /> % The subject name in the certificate will include: spoke spoke.frotmail.lan<br /> % Include the router serial number in the subject name? [yes/no]: yes<br /> % The serial number in the certificate will be: FCZ113120JP<br /> % Include an IP address in the subject name? [no]:<br /> Request certificate from CA? [yes/no]: yes<br /> % Certificate request sent to Certificate Authority<br /> % The &#039;show crypto pki certificate verbose CiscoCA&#039; commandwill show the fingerprint.<br /> <br /> *Apr 13 19:53:14.319: CRYPTO_PKI: Certificate Request Fingerprint MD5: 286C8259 1DF7BD25 22A984F9 4D8C952E<br /> *Apr 13 19:53:14.319: CRYPTO_PKI: Certificate Request Fingerprint SHA1: A6EBCE0F 40164BD8 D6F9A4E5 325BF320 640E54FA<br /> *Apr 13 19:53:16.327: %PKI-6-CERTRET: Certificate received from Certificate Authority<br /> <br /> spoke1#show crypto pki certificates<br /> Certificate<br /> Status: Available<br /> Certificate Serial Number (hex): 02<br /> Certificate Usage: General Purpose<br /> Issuer:<br /> cn=MyCiscoCA<br /> ou=VPN<br /> o=lab<br /> c=NL<br /> Subject:<br /> Name: spoke spoke.frotmail.lan<br /> Serial Number: FCZ113120JP<br /> serialNumber=FCZ113120JP+hostname=spoke spoke.frotmail.lan<br /> cn=spoke1<br /> ou=VPN<br /> o=Frotmail<br /> c=NL<br /> Validity Date:<br /> start date: 18:37:18 UTC Apr 13 2014<br /> end date: 18:37:18 UTC Apr 13 2015<br /> Associated Trustpoints: CiscoCA<br /> <br /> CA Certificate<br /> Status: Available<br /> Certificate Serial Number (hex): 01<br /> Certificate Usage: Signature<br /> Issuer:<br /> cn=MyCiscoCA<br /> ou=VPN<br /> o=lab<br /> c=NL<br /> Subject:<br /> cn=MyCiscoCA<br /> ou=VPN<br /> o=lab<br /> c=NL <br /> Validity Date:<br /> start date: 18:27:35 UTC Apr 13 2014<br /> end date: 18:27:35 UTC Apr 10 2024<br /> Associated Trustpoints: CiscoCA<br /> <br /> [[Category:Cisco]][[Category:Netwerk]][[Category:Cisco Voorbeeldconfigs]]</div>

Eric