Generate Private Key and CSR in Cisco IOS 12.x

1. The Cisco SDM GUI will not allow you to fill in a value for the City attribute.


2. These are the commands to be used within the IOS:


3. Generate rsa general-keys label globalsign-key exp


4. --Set modulus to 1024 Crypto ca trustpoint globalsign Enroll term pem Crl optional


5. Subject-name
   
   
   • Common Name: Enter the exact host and domain name that you require to secure. (Must be the Fully Qualified Domain Name: www.yourdomain.com)
   
   
   • Organizational Unit: Enter the name of the identity's Organizational Unit. (Example: Support)
   
   
   • Organization: Enter the name of the identity's Organization. (Example: ABC Corp)
   
   
   • Country: Choose the drop-down list to view a list of country abbreviations. Select the country in which the Organization is located.
   
   
   • State/Province: Enter the full name of the state or province in which the identity resides
   
   
   • FQDN: your entire domain name including any sub-domains
   
   
6. Rsakeypair globalsign-key


7. Exit


8. Crypto ca enroll globalsign


9. --No, do not include router serial number


10. --No, do not include IP address


11. --Yes, display certificate request to terminal