0

I'm trying to use 'method-est' for enrollment on solution I'm working and whenever I start the process of 'crypto pki authenticate ' it fails. I'm not getting any sort of response whatsoever I believe because of a TLS handshake failure I'm seeing with wireshark. There is not much documentation for EST on cisco.com so I'm struggling to figure out what my next steps are. I'm using a CertAgent CA from InfoSecCorp and it has EST enabled because I can request the root cert fine when I use postman and just do a GET request.

!
crypto pki trustpoint RED-CA
 enrollment profile RED-CA-PROFILE
 fqdn site-ops-ie-01.domain.com
 subject-name cn=site-ops-ie-01.domain.com
 revocation-check crl
 rsakeypair SITE-OPS-IE-01.key 4096
!
crypto pki profile enrollment RED-CA-PROFILE
 method-est
 authentication url  https://10.1.12.29:443/.well-known/est/certagent/ca7/cacerts
 enrollment url  https://10.1.12.29:443/.well-known/est/certagent/ca7/simpleenroll
 reenrollment url  https://10.1.12.29:8443/.well-known/est/certagent/ca7/simplereenroll
 enrollment credential  RED-CA
 source-interface Loopback0
!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.