Types of Enrollment
In FIPS mode, CRL-related commands are blocked. When a user tries to configure a CRL-related
command, a message is logged to indicate that the command is not supported in FIPS
mode. There are two basic modes: manual enrollment and automatic enrollment.
In manual mode, the user has alternate means of procuring certificates. In such a case, the required certificates are copied to the system flash. These certificates are then imported into PKI and authenticated.
In automatic (auto-enrollment) mode, all messages between the requester and the CA are managed by the network resources. This mode is used to efficiently enroll many system requesters, and the requester systems usually have a common, templated configuration.