<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:51" />
    <title>Creating a Trust Point CA Association </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1636;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1073422"> </a><h1 class="pTitle">
Creating a Trust Point CA Association

</h1>
<a name="wp1077860"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1118869"> </a><p class="pBody">
To create a trust point CA association, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1118870"> </a><li class="pSmartList1">Expand <b class="cBold">Switches</b> &gt; <b class="cBold">Security,</b> and then select <b class="cBold">PKI</b> in the Physical Attributes pane. 
</li>
<a name="wp1118871"> </a><li class="pSmartList1">Click the <b class="cBold">Trust Point </b>tab in the Information Pane.
</li>
<a name="wp1118872"> </a><li class="pSmartList1">Click <b class="cBold">Create Row</b>. 
</li>
<a name="wp1118873"> </a><li class="pSmartList1">Select the switch for which you are creating the trust point CA from the <b class="cBold">Switch</b> drop-down menu.
</li>
<a name="wp1118874"> </a><li class="pSmartList1">Assign a name to the trust point CA. 
</li>
<a name="wp1118875"> </a><li class="pSmartList1">Select a key-pair name to be associated with this trust point for enrollment. It was generated earlier in 
the <a href="digicert18.html">&quot;Generating an RSA Key Pair&quot; topic</a>. Only one RSA key-pair can be specified per CA. 
</li>
<a name="wp1118879"> </a><li class="pSmartList1">From the RevokeCheckMethod drop-down menu, select the certificate revocation method that you would 
like to use. You can use CRL, OCSP, CRL OCSP, or OCSP CRL to check for certificate revocation. 
</li>
<a name="wp1118880"> </a><p class="pListBodyLevel1">
The CRL OCSP option checks for revoked certificates first in the locally stored CRL. If not found, the 
switch uses OCSP to check the revoked certificates on the URL specified in Step 7.

</p>
<a name="wp1118881"> </a><li class="pSmartList1">Enter the OCSP URL if you selected an OCSP certificate revocation method. 
</li>
<a name="wp1118882"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> The OSCP URL must be configured before configuring the revocation checking method.

</p>
<a name="wp1118883"> </a><li class="pSmartList1">Click <b class="cBold">Create</b> to successfully create the trust point CA.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
