Auto-enroll

[sanjaykt]

Hi

I have managed to get my IPsec encryption working using digital Certificates from MS CA server. But I am failing to usnderstand what is the use Auto-enrol command in Ca trustpoint configuration. As when I enrol my routers for cert, I have to supply password so that router can be supplied with cert.

If this is the case then router can not enrol itself with CA server and download certificate.

Am I missing something here ??

thanks

[owillins]

Here's what I know. When a cert is due to expire, it will not automatically re-enroll. This is something that the administrator of the CA server or router will need to track. So you will need to check for the expiry using the sh cert.

[sanjaykt]

thanks but then what is the use of auto enrol command ??

cheers