User manual

5-17
5.1.8 crypto
Global Configuration Commands
Use this command to configure encryption related commands.
Syntax
crypto(key|pki)
crypto key(export|generate|import|zeroize)
crypto key export rsa<name> URL[tftp|ftp]
crypto key generate rsa<name> <1024-2048>
crypto key import rsa<name> URL[tftp|ftp]
crypto key zeroize rsa<name>
crypto pki(authenticate|enroll|export|import|trustpoint)
crypto pki authenticate <name> (terminal|tftp|ftp)
crypto pki enroll<name> (request|self-signed)
crypto pki export <name> (request|trustpoint)(tftp|ftp)
Parameters
NOTE crypto pki trustpoint mode leads to (config-trustpoint) instance. For
more information, see crypto-trustpoint Instance on page 6-1.
key Authentication key management.
export Exports a keypair related configuration.
generate Generates a keypair.
import Imports keypair related configuration.
zeroize Deletes a keypair.
rsa<identifier> RSA keypair identifier associated with keypair.
URL URL for sending the key to. It can be one of the following:
•
tftp://<IP>/path/file (or)
• ftp://<user>:<passwd>@<IP>/path/file
pki Configures certificate parameters. The public key infrastructure is a protocol
that creates encrypted public keys using digital certificates from certificate
authorities. PKI ensures each online party is who they claim to be.
authenticate Authenticate and import CA certificate.
enroll Enroll.
export Export.
import Import.
trustpoint Defines a CA trustpoint.
request Certificate request mode of enrollment.