CiscoPkiAction

  • Base type Enumeration

The PKI Support Actions for performing the certificate work-flow operations. 'noop' - No operation 'caauth' - Certificate Authority (CA) authentication. This operation is provided to authenticate a CA and install its CA certificate/chain in a trustpoint This action needs to be followed up with the 'certconfirm' or 'certnoconfirm' action explained below. 'cadelete' - CA Certificate/chain deletion. This operation is provided to delete the CA certificate/chain from a trustpoint. 'certreq' - Identity certificate Request creation. This operation is provided to generate a pkcs#10 format certificate request needed to obtain an identity certificate from a CA. 'certimport' - Identity certificate import. This operation is provided to install an identity certificate obtained from a CA for an earlier certificate request, in a trustpoint. 'certdelete' - Identity certificate deletion. This operation is provided to delete the identity certificate from a trustpoint. If the certificate is the only generic certificate in the device, delete is not allowed; 'forcecertdelete' operation needs to be used to force the delete. 'pkcs12import' - This operation is provided to facilitate the importing of the identity certificate, corresponding key-pair and CA certificate/chain in pkcs#12 format into a trustpoint. 'pkcs12export' - This operation is provided to facilitate the exporting of the key-pair, identity certificate and the CA certificate in pkcs#12format from a trustpoint. 'certconfirm' - This operation is provided to confirm the acceptability of a certificate after manual verification of its fingerprint subsequent to the action 'caauth', there by completing that action and installing the certificate in the trustpoint. 'certnoconfirm' - This operation is provided to confirm the unacceptability of a certificate after the manual verification of its fingerprint subsequent to the action 'caauth', there by rejecting the certificate and completing that action. 'forcecertdelete' - Same as 'certdelete' except it forces the delete. 'crlimport' - CRL import. This operation is provided to import a CRL into a trustpoint. 'crldelete' - CRL delete. This operation is provided to delete the CRL from a trustpoint.

Possible values

13 objects
Number Name
1 noop
2 caauth
3 cadelete
4 certreq
5 certimport
6 certdelete
7 pkcs12import
8 pkcs12export
9 certconfirm
10 certnoconfirm
11 forcecertdelete
12 crlimport
13 crldelete