pki trustpoint

Enters PKI trustpoint configuration mode, where PKI CA parameters can be configured.
Syntax
pki trustpoint { trustpoint }
no pki trustpoint { trustpoint }
Parameters
trustpoint
Names the trustpoint for which parameters are configured.
Modes

Global configuration mode

Usage Guidelines

The no form of the command removes the trustpoint and its parameters.

Examples

The following example configures the PKI trustpoint trust1. 

device# configure terminal
device(config)# pki trustpoint trust1
device(config-pki-trustpoint-trust1)# auto-enroll
device(config-pki-trustpoint-trust1)# enrollment retry-period 2
device(config-pki-trustpoint-trust1)# enrollment profile profile1
device(config-pki-trustpoint-trust1)# pki-entity entity1
device(config-pki-trustpoint-trust1)# eckeypair key-label eckeyAuto
device(config-pki-trustpoint-trust1)# fingerprint 36:0c:92:6e:df:b2:72:eb:59:e8:63:73:2a:98:a8:91:cb:
50:94:d9
device(config-pki-trustpoint-trust1)# ocsp http post
device(config-pki-trustpoint-trust1)# exit

The following example shows the configuration options available in PKI trustpoint configuration sub-mode. 

device(config-pki-trustpoint-trust2)# ?
auto-enroll                       To send enrollment message to the CA and local
																																		certificates.               
clear                             Clear table/statistics/keys.
crl-query                         To set crl query url.
crl-update-time                   To set the CRL update period.
eckeypair                         To specify which ec keypair to use during
                                  enrollment.
end                               End Configuration level and go to Privileged 
                                  level.
enrollment                        To set enrollment retry count, retry period or
																																		profile.
exit                              Exit current level.
extended-key-usage                To set or unset extended key usage parameters.
fingerprint                       To set fingerprint of the CA.
local-certificate                 URL of the local certificate.
no                                Undo/disable commands.
ocsp                              To set http method for ocsp request.
ocsp-url                          To set the oscp url.
pki-entity                        The PKI entity parameter to be used while enrolling
																																		to the CA.
quit                              Exit to User level.
revocation-check                  To specify which method to be followed for revocation 
                                  check.
rsakeypair                        To specify which rsa keypair to use during 
                                  enrollment.
show                              Show system information.
write                             Write running configuration to flash or terminal.
<cr>
device(config-pki-trustpoint-trust2)#
Parent topic: Commands O, P, Q, R, and Sa through Sh