User's Manual

2-25

Catalyst 6500 Series Switch WebVPN Module Command Reference—Release 1.1

OL-7310-01

Chapter 2 Commands for the Catalyst 6500 Series Switch WebVPN Module

crypto pki profile enrollment

To define an enrollment profile, use the crypto pki profile enrollment command in global configuration

mode. To delete all information associated with this enrollment profile, use the no form of this command.

crypto pki profile enrollment label

Syntax Description

Defaults This command has no default settings.

Command Modes Global configuration

Command History

Usage Guidelines After entering the crypto pki profile enrollment command, you can use any of the following commands

to define the profile parameters:

• authentication command—Specifies the HTTP command that is sent to the certification authority

(CA) for authentication.

• authentication terminal—Specifies manual cut-and-paste certificate authentication requests.

• authentication url—Specifies the URL of the CA server to which to send authentication requests.

• enrollment command—Specifies the HTTP command that is sent to the CA for enrollment.

• enrollment terminal—Specifies manual cut-and-paste certificate enrollment.

• enrollment url—Specifies the URL of the CA server to which to send enrollment requests.

• parameter—Specifies parameters for an enrollment profile. This command can be used only if the

authentication command or the enrollment command is used.

Note The authentication url, enrollment url, authentication terminal, and enrollment terminal commands

allow you to specify different methods for certificate authentication and enrollment, such as TFTP

authentication and manual enrollment.

Examples This example shows how to specify the timeout in seconds for each request:

webvpn(config)# crypto pki profile enrollment test

webvpn(ca-profile-enroll)#

label Certificate enrollment profile tag.

Release Modification

WebVPN Module

Release 1.1

Support for this command was introduced on the Catalyst 6500 series

switches.