MicroNugget: How to Create a Client on Cisco IOS PKI Server

In this video, Keith Barker covers how to create a certificate authority out of an IOS router and train an IOS client to use that certificate authority. A key element of using RSA signatures for authentication is to make sure you have digital certificates installed on the devices that need to use them, and Keith will walk you through that.

Keith will show you how to create a certificate authority out of an IOS router and then train an IOS client to use that certificate authority. The process begins with the simple certificate enrollment protocol (SCEP), which uses HTTP for the authentication and enrollment of its clients. Next, Keith will walk you through putting a minimum configuration in for the server syntax’s crypto PKI server. You’ll need to create a password that’s used to protect the private key from the private-public key pair that’s just been generated for its own digital certificate. You’ll see each step of the process in this video as Keith shows you how to configure the certificate authority and then validate it to ensure it’s working correctly.

Start learning with CBT Nuggets:

[oswaldojfernandez]

Where would I be without Keith and his labs? These labs are so useful for adding that real component to your lab and not having to just read about it or watch a video of someone else doing it in real life. These MicroNuggets have made me decide to use CBT Nuggets for the video portion of my CCNA Security studies. Thanks Keith!

[egoze]

Very nice, extremely well done, thank you.

[cristobalvallejosv]

Hello Keith...nice vid...however I couldnt understand it very well.
Im just starting on network security....I have only 2 years dealing with ASA and for Remote users VPN we use certificates...however...the installation is quite straight forward for me....but I dont know what Im you do a MicroNuggets about it? focussing in theory or why we do that?

[nataliabarba]

hi can you show how to disable this ? on a router? please