CiscoPkiAction
The PKI Support Actions for performing the certificate work-flow operations. 'noop' - No operation 'caauth' - Certificate Authority (CA) authentication. This operation is provided to authenticate a CA and install its CA certificate/chain in a trustpoint This action needs to be followed up with the 'certconfirm' or 'certnoconfirm' action explained below. 'cadelete' - CA Certificate/chain deletion. This operation is provided to delete the CA certificate/chain from a trustpoint. 'certreq' - Identity certificate Request creation. This operation is provided to generate a pkcs#10 format certificate request needed to obtain an identity certificate from a CA. 'certimport' - Identity certificate import. This operation is provided to install an identity certificate obtained from a CA for an earlier certificate request, in a trustpoint. 'certdelete' - Identity certificate deletion. This operation is provided to delete the identity certificate from a trustpoint. If the certificate is the only generic certificate in the device, delete is not allowed; 'forcecertdelete' operation needs to be used to force the delete. 'pkcs12import' - This operation is provided to facilitate the importing of the identity certificate, corresponding key-pair and CA certificate/chain in pkcs#12 format into a trustpoint. 'pkcs12export' - This operation is provided to facilitate the exporting of the key-pair, identity certificate and the CA certificate in pkcs#12format from a trustpoint. 'certconfirm' - This operation is provided to confirm the acceptability of a certificate after manual verification of its fingerprint subsequent to the action 'caauth', there by completing that action and installing the certificate in the trustpoint. 'certnoconfirm' - This operation is provided to confirm the unacceptability of a certificate after the manual verification of its fingerprint subsequent to the action 'caauth', there by rejecting the certificate and completing that action. 'forcecertdelete' - Same as 'certdelete' except it forces the delete. 'crlimport' - CRL import. This operation is provided to import a CRL into a trustpoint. 'crldelete' - CRL delete. This operation is provided to delete the CRL from a trustpoint.
Possible values
13 objects| Number | Name |
|---|---|
| 1 | noop |
| 2 | caauth |
| 3 | cadelete |
| 4 | certreq |
| 5 | certimport |
| 6 | certdelete |
| 7 | pkcs12import |
| 8 | pkcs12export |
| 9 | certconfirm |
| 10 | certnoconfirm |
| 11 | forcecertdelete |
| 12 | crlimport |
| 13 | crldelete |