Automatic Granting of Certificates

[astanislaus]

On the root CA server, automatic granting of certificate re-enrollment requests for subordinate CAs does not work,.

Although grant auto rollover ca-cert is configured, requests must be manually granted

[#2]

CA servers have the flexibility to be configured as a subordinate certificate server or an RA-mode certificate serve. When a CA generates its rollover certificate and key pair, it must be able to save its active configuration. If the current configuration has been altered, saving of the rollover certificate and key pair will not happen automatically. In this case, the administrator must save the configuration manually or rollover information will be lost.

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cfg_mng_cert_serv_ps6017_TSD_Products_Configuration_Guide_Chapter.html#wp1189436