IOS CA Certificate Enrollment

wendal

Can anyone help elaborate the difference between the following two IOS CA enrollment commands

(config)# crypto ca enroll CA_R3

and

(config)# crypto ca trustpoint CA_R3

                # auto-enroll

Do they accomplish the same thing?

I have noticed on the Security mini-labs workbook volume I, the IOS CA lab, doesnt use "crypto ca enroll ....." to enroll to request the client router's certificate; instead the 2nd set of commands stated above are used.

Thanks for all help provided to clear this up for me.

Kingsley

With auto-enroll configured, you need not enroll to CA manually using "crypto ca enroll". The IOS does it automatically.

 

With regards

Kinhs

wendal

Ah, ok. That explains why I've not seen both of them being used at the same time in the configuration examples I've seen.

 

Thank you. Much appreciated