Hey Team,
While trying to follow the steps for manual enrollment on a Cisco router, it keeps failing since the CSR sent to the CA uses a hashing algorithm as MD5. I have tried to create new RSA keypair of keysize 2048 and specific label and use them in my trustpoint, but looks like the router is using some default configuration that I'm unable to over-ride.
Really appreciate any help.
Command used:
- enable
- config terminal
- cypto key generate rsa modulus 2048 label test-enroll
- crypto pki trustpoint test-enroll
- rsakeypair test-enroll
- enrollment url http://abc.domain.net
- subject-name CN=test
- hash sha256
- exit
- crypto pki authenticate test-enroll
- crypto pki enroll test-enroll
