Wired Intelligent Edge (Campus Switching and Routing)

Requirement:

Aruba 2930F Switch running firmware version WC.16.10.0003

In the following example, the Trust-Anchor profile DEFAULT is created and root certificated is copied using TFTP.

------- Enable Debugging ------

Core-Switch# debug destination session
Core-Switch# debug security crypto
Core-Switch# show debug
Core-Switch# debug event

Core-Switch# show debug

 Debug Logging

  Source IP Selection: Outgoing Interface
  Origin identifier: Outgoing Interface IP
  Destination:
   Session

  Time-stamp: System-Uptime

  Enabled debug types:
   event
   security crypto

------- Create Trust-Anchor Profile ------

Core-Switch(config)# crypto pki ta-profile DEFAULTz

0002:15:56:33.85 CRYP mSnmpCtrl:Trust Anchor Profile "DEFAULTz" created.

-------  Copy Root Certificate ------

Core-Switch# copy tftp ta-certificate DEFAULT 15.250.101.177 RootCert.cer
000M Transfer is successful

I 04/04/20 22:14:04 00131 tftp: Transfer completed
I 04/04/20 22:14:05 03409 crypto: Trust Anchor Root Certificate installed on
            Trust Anchor Profile "DEFAULT".

------- Display Certificate ------

Core-Switch# show crypto pki ta-profile DEFAULT
  Profile Name    Profile Status                 CRL Configured  OCSP Configured
  --------------- ------------------------------ --------------- ---------------
  DEFAULT         1 certificate installed         No              No

  Trust Anchor:
Version: 3 (0x2)
Serial Number:
   2d:f9:7f:10:4d:e6:fe:a5:47:da:f1:c6:40:3c:c9:7c
Signature Algorithm: sha256withRSAEncryption
Issuer: CN=WIN-FUVI1DQCP99-CA