Enterasys Networks X-Pedition XSR CLI - Manual (Page 545)

Other Certificate Commands
XSR CLI Reference Guide 14-91
Mode
Global configuration: XSR(config)#
Sample Output
The following script prompts you to accept the certificate.
XSR#crypto ca authenticate ACMEca
Certificate has the following attributes:
Fingerprint: 0123 4567 89AB CDEF 0123
Do you accept this certificate? [yes/no] y
crypto ca certificate chain
This command invokes Certificate Chain mode. In this mode, you can delete a certificate by
entering the
no certificate commands. If you issue this command, you should also:
• Ask the CA administrator to revoke XSRʹs certificates at the CA; you must supply the
challenge password you created when you first got the certificates with
crypto ca enroll .
• Remove the XSRʹs certificates from the configuration using the certificate command.
Syntax
crypto ca certificate chain name
Mode
Global configuration: XSR(config)#
Next Mode
Certificate chain configuration: XSR(config-cert-chain)#
Example
This command acquires Certificate Chain mode in which a certificate can be added or removed.
Note that the script prompts you to remove the certificate:
XSR(config)#crypto ca certificate chain ACMEca
XSR(config-cert-chain)#no certificate 0123456789ABCDEF0123456789ABCDEF
% Are you sure you want to remove the certificate [yes/no]? yes
% Be sure to ask the CA administrator to revoke this certificate.
name CA name. Use the same name you declared using crypto ca identity .