Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2011-08-15 10:27:45.0

TN 8412 - How do I install the Trusted Root Certificate on a Cisco ACE appliance?

Question:

How do I install the Trusted Root Certificate on a Cisco ACE appliance?

Answer:

To install the Trusted Root Certificate, complete the following steps:


1.    Copy the Entrust 2048 Root Certificate (including the BEGIN and END tags).


2.    Import the Root Certificate onto the ACE using the crypto import command in Exec mode. The following example shows how to use the terminal keyword to allow pasting of the certificate information to the file Entrust2048Root.pem:

 ACE-1/Admin# crypto import terminal Entrust2048Root.pem

 Enter PEM formatted data ending with a blank line or "quit" on a line

 by itself

 -----BEGIN CERTIFICATE-----

 MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChMLRW50cnVzdC5u

 ZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBpbmNvcnAuIGJ5IHJlZi4gKGxp

 bWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNV

 BAMTKkVudHJ1c3QubmV0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw05OTEyMjQx

 NzUwNTFaFw0yOTA3MjQxNDE1MTJaMIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3

 d3d3LmVudHJ1c3QubmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxpYWIuKTEl

 MCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEGA1UEAxMqRW50cnVzdC5u

 ZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A

 MIIBCgKCAQEArU1LqRKGsuqjIAcVFmQqK0vRvwtKTY7tgHalZ7d4QMBzQshowNtTK91euHaYNZOL

 Gp18EzoOH1u3Hs/lJBQesYGpjX24zGtLA/ECDNyrpUAkAH90lKGdCCmziAv1h3edVc3kw37XamSr

 hRSGlVuXMlBvPci6Zgzj/L24ScF2iUkZ/cCovYmjZy/Gn7xxGWC4LeksyZB2ZnuU4q941mVTXTzW

 nLLPKQP5L6RQstRIzgUyVYr9smRMDuSYB3Xbf9+5CFVghTAp+XtIpGmG4zU/HoZdenoVve8AjhUi

 VBcAkCaTvA5JaJG/+EfTnZVCwQ5N328mz8MYIWJmQ3DW1cAH4QIDAQABo0IwQDAOBgNVHQ8BAf8E

 BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVeSB0RGAvtiJuQijMfmhJAkWuXAwDQYJ

 KoZIhvcNAQEFBQADggEBADubj1abMOdTmXx6eadNl9cZlZD7Bh/KM3xGY4+WZiT6QBshJ8rmcnPy

 T/4xmf3IDExoU8aAghOY+rat2l098c5u9hURlIIM7j+VrxGrD9cv3h8Dj1csHsm7mhpElesYT6Yf

 zX1XEC+bBAlahLVu2B064dae0Wx5XnkcFMXj0EyTO2U87d89vqbllRrDtRnDvV5bu/8j72gZyxKT

 J1wDLW8w0B62GqzeWvfRqqgnpv55gcR5mTNXuhKwqeBCbJPKVt7+bYQLCIt+jerXmCHG8+c8eS9e

 nNFMFY3h7CI3zJpDC5fcgJCNs2ebb0gIFVbPv/ErfF6adulZkMV8gzURZVE=

 -----END CERTIFICATE-----
 quit


3.    Use the show crypto certificate command to display the certificate information. For example:

ACE-1/Admin# show crypto certificate all

All Certificate Files Loaded:

Entrust2048Root.pem:

Subject: /O=Entrust.net/OU=(c) 1999 Entrust.net Limited/OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/CN=Entrust.net Certification Authority (2048)

Issuer: /O=Entrust.net/OU=(c) 1999 Entrust.net Limited/OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/CN=Entrust.net Certification Authority (2048)

Not Before: Dec 24 13:50:51 1999 GMT

Not After: Jul 24 10:15:12 2029 GMT

CA Cert: TRUE

 

Affected Products:

  • Entrust Certificate Services 1 Year Advantage SSL Certificate Version Not Applicable Language Not Applicable Platform Not Applicable