Wired Intelligent Edge

last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

How to display ta-profile when profile-name is 12 characters

This thread has been viewed 3 times

  • 1.  How to display ta-profile when profile-name is 12 characters

    Posted Oct 13, 2019 07:12 PM

    I read that the ta-profile name can be upto 100 characters long.

     

    How do I interpret the Profile Name when they are greater than 12 characters;

     

    Aruba-2930F-48G-PoEP-4SFPP# show crypto pki ta-profile
    Profile Name Profile Status CRL Configured OCSP Configured
    --------------- ------------------------------ --------------- ---------------
    IDEVID_ROOT Root Certificate Installed
    COMODO_CA Root Certificate Installed No No
    GEOTRUST_CA Root Certificate Installed No No
    ARUBA_CA Root Certificate Installed No No
    ADDTRUST_CA Root Certificate Installed No No
    CLEARPASS-QU... Root Certificate Installed No No
    CLEARPASS-QU... Pending Root Certificate In... No No

     

    Adjusting my terminal width makes no difference.



  • 2.  RE: How to display ta-profile when profile-name is 12 characters

    Posted Oct 15, 2019 11:57 AM

    add "detail" to the end of the command will give you the full profile name:

    show crypto pki ta-profile detail



  • 3.  RE: How to display ta-profile when profile-name is 12 characters

    Posted Oct 15, 2019 08:24 PM

    detail doesn't exist, at least not on my version (wc.16.07.0006);

     

    Aruba-2930F-48G-PoEP-4SFPP# sh crypto pki ta-profile detail
    TA Profile detail does not exist.


    Aruba-2930F-48G-PoEP-4SFPP# sh crypto pki ta-profile ?
    crl Show the CRL details of the TA profile.
    TA-PROFILE-NAME Enter the profile name.
    <cr>

     

    it only works if you know the profile name;

    Aruba-2930F-48G-PoEP-4SFPP# sh crypto pki ta-profile aruba_ca detail
    Profile Name : ARUBA_CA
    Profile Status : Root Certificate Installed

    CRL Configured : No
    CRL URL1 : Not configured
    CRL URL2 : Not configured
    CRL Refresh Interval : 24
    CRL Enforcement : Strict
    CRL Root Certificate Profile :

    OCSP Configured : No
    OCSP URL1 : Not configured
    OCSP URL2 : Not configured
    OCSP Enforcement : Strict
    OCSP Disable Nonce : No
    OCSP Root Certificate Profile :
    OCSP Delegate URL1 : Not configured
    OCSP Delegate URL2 : Not configured
    OCSP Delegate URL3 : Not configured
    OCSP Delegate URL4 : Not configured

     

    However, since I cannot determine the profile name because its abbreviated, I'm at a loss;

     

    Aruba-2930F-48G-PoEP-4SFPP# sh crypto pki ta-profile
    Profile Name Profile Status CRL Configured OCSP Configured
    --------------- ------------------------------ --------------- ---------------
    IDEVID_ROOT Root Certificate Installed
    COMODO_CA Root Certificate Installed No No
    GEOTRUST_CA Root Certificate Installed No No
    ARUBA_CA Root Certificate Installed No No
    ADDTRUST_CA Root Certificate Installed No No
    CLEARPASS-QU... Root Certificate Installed No No
    CLEARPASS-QU... Pending Root Certificate In... No No



  • 4.  RE: How to display ta-profile when profile-name is 12 characters

    Posted Oct 16, 2019 03:03 AM

    Yes unfortunetly detail is in later code releases, screen print as below.

     

    I'm running latest code: WC.16.09.0004.

     

    (config)# show crypto pki ta-profile detail

    Profile Name : IDEVID_ROOT
    Profile Status : Root Certificate Installed
    CRL Configured :
    OCSP Configured :

    Profile Name : COMODO_CA
    Profile Status : Root Certificate Installed
    CRL Configured : No
    OCSP Configured : No

    Profile Name : GEOTRUST_CA
    Profile Status : Root Certificate Installed
    CRL Configured : No
    OCSP Configured : No

    Profile Name : ARUBA_CA
    Profile Status : Root Certificate Installed
    CRL Configured : No
    OCSP Configured : No

    Profile Name : ADDTRUST_CA
    Profile Status : Root Certificate Installed
    CRL Configured : No
    OCSP Configured : No

    Profile Name : QuoVadis Root CA 2 G3
    Profile Status : Root Certificate Installed
    CRL Configured : No
    OCSP Configured : No