Command Reference Guide

SROS Command Line Interface Reference Guide CA Profile Configuration Command Set
5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 423
enrollment url <url>
Use the enrollment url command to specify the URL of the CA where the Secure Router OS should send
certificate requests.
Syntax Description
<url> Enter the certificate authority’s URL (e.g.,
http://10.10.10.1:400/abcdefg/pkiclient.exe).
Default Values
No defaults necessary for this command.
Command Modes
(ca-profile)# CA Profile Configuration
Functional Notes
When entering the URL http:// is required, followed by the IP address or DNS name of the CA. If the port
number is something other than 80, include it after the IP address or DNS name separated with a colon (:).
The CA may have other necessary information to include in the CGI path before ending with the actual CGI
program. An example template to follow is http://hostname:port/path/to/program.exe.
NOTE: To use the default program pkiclient.exe without specifying it, end the URL with a slash (/).
Otherwise, you must enter the program name to use. For example, http://10.10.10.1:400/abcdefg/ will
assume pkiclient.exe as the program (but not including the terminating slash is a configuration error).
Specifying this command will override the enrollment terminal setting as described previously (see
enrollment terminal on page 422).
Usage Examples
The following example specifies http://CAserver/certsrv/mscep/mscep.dll as the URL to which the
Secure Router OS will send certificate requests:
(ca-profile)#enrollment url http://CAserver/certsrv/mscep/mscep.dll