13 Replies Latest reply: Jan 4, 2018 2:11 PM by Mark Holm - 3xCCIE #34763/CCDE #2016::20 RSS

    What generates this certificate inside running-config?


      What generates the following certificate in the running config? I suspect it's "Crypto key Generate RSA" since I've been playing with it. But the command shown below is actually "crypto pki ....."


      What's this certificate's purpose?


      Also, I run "copy run start" but the certificate doesn't show up inside start-config. does it mean the certificate gets re-generated every time when the router starts?



      crypto pki trustpoint TP-self-signed-4279256517

      enrollment selfsigned

      subject-name cn=IOS-Self-Signed-Certificate-4279256517

      revocation-check none

      rsakeypair TP-self-signed-4279256517



      crypto pki certificate chain TP-self-signed-4279256517

      certificate self-signed 01

        3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

        31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

        69666963 6174652D 34323739 32353635 3137301E 170D3137 31323331 31393330

        34365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

        4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 32373932

        35363531 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

        8100BDEB 1A3B69DC 2BFA16B1 EF3FEB20 BABDDE4A 648DBA7F 32A6B7E7 78EF5F41

        7692DCCB EC5EFF77 CBAAB071 217DAD5D 1BF98A8B 62CB0F4A 5D1435E8 90B07284

        A2D84BCA 276CA71F 2FF592DB 36FDCCFD 04E97F46 3909E204 6B8FAF15 D6C6E1D3

        6BA7ECDF CEF86878 C6CBBDCB 5C9C45FB 62655835 D0A2E3C9 6C059689 9D384C3C

        24B30203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603

        551D2304 18301680 141A2B24 C0312782 C04BB299 465F40BE E07C2AD6 7F301D06

        03551D0E 04160414 1A2B24C0 312782C0 4BB29946 5F40BEE0 7C2AD67F 300D0609

        2A864886 F70D0101 05050003 8181008A 1C399BC9 3CDFBE58 EFCD5298 7DE6F0B0

        2E6AC015 BD76066F B84D8A45 3312101B 4D751769 B5767A86 B596093C 31846C58

        C10C3C83 B090440C 01F0471E 99F57696 C327E3E9 93941D28 CEF6D396 E7023D13

        11BF94EA 84084122 7C24F0E8 D40A89B1 F6304019 CC95718D 9A51A1D0 C1D3E84C

        86F07EE3 44698577 F679B3D0 22DD93