3-187
Cisco Broadband Cable Command Reference Guide
OL-1581-08
Chapter 3 Cisco CMTS Show Commands
show crypto ca trustpoints
show crypto ca trustpoints
To display the Root certificate that the Cisco CMTS has learned after the first cable modem has
registered with BPI+ encryption, use the
show crypto ca trustpoints
command in privileged EXEC
mode.
show crypto ca trustpoints
Syntax Description
No default behaviors or values
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Note
The
show crypto ca trustpoints
command does not display the root certificate until after at least one
cable modem has registered with the Cisco CMTS using BPI+ encryption. Alternatively, you can use the
unsupported command
test cable generate
in privileged EXEC mode to force the Cisco CMTS to
register the root certificate.
Tip
To display all certificates (Root, Manufacturers, CM) that the CMTS has learned, use the
show crypto
ca certificates
command.
For additional information about using the
show crypto
commands on the Cisco CMTS, refer to the
“Configuring DOCSIS 1.1 on the Cisco CMTS” chapter of the
Cisco CMTS Feature Guide
:
http://www.cisco.com/en/US/products/hw/cable/ps2217/products_feature_guide_chapter09186a00
8019b57f.html
Examples
The following example illustrates the
show crypto ca trustpoints
command with
Cisco IOS Release 12.3(9a)BC:
Router#
show crypto ca trustpoints
Root certificate
Status: Available
Certificate Serial Number: D54BB68FE934324F6B8FD0E41A65D867
Key Usage: General Purpose
Issuer:
CN = DOCSIS Cable Modem Root Certificate Authority
OU = Cable Modems
O = Data Over Cable Service Interface Specifications
C = US
Subject Name:
CN = "BPI Cable Modem Root Certificate Authority "
OU = DOCSIS
O = BPI
C = US
Validity Date:
start date: 07:00:00 UTC Mar 27 2001
end date: 06:59:59 UTC Jan 1 2007
Release
Modification
12.3(9a)BC
This command was introduced.