Specifications

15-2 Cryptography Commands
crypto ca-certificate
Installsacertificateauthority’sownPKCS #7certificateintotheRoamAboutSwitchcertificateand
keystoragearea.
Syntax
crypto ca-certificate {admin | eap | web} PEM-formatted-certificate
Parameters
Defaults
None.
Mode
Enabled.
Usage
ThePrivacy‐EnhancedMailprotocol(PEM)formatisusedforrepresentingaPKCS #7certificate
inASCIItext.PEMusesbase64encodingtoconvertthecertificatetoASCIItext,thenputsthe
encodedtextbetweenthefollowingdelimiters:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
Tousethiscommand,youmustalreadyhaveobtainedacopyofthecertificateauthority’s
certificateasaPKCS #7objectfile.Thendothefollowing:
1. OpenthePKCS #7objectfilewithanASCIItext editorsuchasNotepador vi.
2. Enterthecryptoca‐certificatecommandontheCLIcommandline.
3. WhenMSS
promptsyouforthePEM‐formattedcertificate,pastethePKCS #7objectfileonto
thecommandline.
admin Storesthecertificateauthority’scertificatethatsignedtheadministrative
certificatefortheRoamAboutSwitch.
TheadministrativecertificateauthenticatestheRoamAboutSwitchtoRASM
orWebView.
eap Storesthecertificateauthority’scertificatethatsignedtheExtensible
AuthenticationProtocol (EAP)certificatefortheRoamAbout.
TheEAPcertificateauthenticatestheRASto802.1Xsupplicants(clients).
web Storesthecertificateauthority’scertificatethatsignedthecertificateforthe
RoamAboutSwitch.
TheWebcertificateauthenticatestheRoamAboutSwitchtoclientswhouse
WebAuthentication.
PEM‐formatted‐
certificate
ASCIItextrepresentationofthecertificate
authorityPKCS #7certificate,
consistingofupto5120 charactersthatyouhaveobtainedfromthecertificate
authority.