question about registration of CA

I have a large company of a dmvpn star site. We are currently using psk for IKE authentication. We seek to put in place an internal PKI infrastructure for IKE authentication. I configured an internal root CA and 2 secondary cases on the routers from 1941 to this effect. We expect use PEIE autoenrollment for routers of the head of Star network to register for these internal certification authorities. My question is which of these cases should I have my routers register to? Or can I have a few routers join sup - A1 and some apply to sup - A2 and maybe a few to root-CA?

enrollment url http://rootCA:80

enrollment url http://subCA1:80

enrollment url http://subCA2:80
??? 

Hello

There is no problem from the point of view of IPsec to register for the two subCAs.

The CERT_REQ payload will be sent for two subCAs in Main Mode 3 and 4 message.

(Note: If you want to change this behavior, you can select the profile of isakmp particular trustpoint inside)

Nowayds it is more important to the highly available as CA (ISMA) CRL itself.

Two subCAs means do not rely on a unique material to provide functions to update the registration/CRL.

Note that you can chain up to the root certificates, which should allow essentially rays are registered to the subCA1 to establish IPsec with subCA2.

http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_cfg_auth_rev_cert_ps6441_TSD_Products_Configuration_Guide_Chapter.html#wp1065596

I have not tried to do it with the SCEP Protocol... not sure if you can do it automatically...

Marcin

Tags: Cisco Security

Similar Questions

  • Questions about registration of the catalogues, changes

    Hello-, I save all my pictures from LR and records to 2 back ups - each an external hard drive.

    I'll be getting a new hard drive installed in my laptop so will have to re - install LR.

    My question is: my ratings pictures, changes, cultures, folder names and important content of the catalogues will be on 2 external hard drives.

    I know that the photos are saved but wonder about the rest of the above - especially the catalogues.

    Group discussion thanks.

    kathyt. YYC

    One thing you want to make sure, is that you restore your photos from your backup disk has the EXACT structure of folders of your internal drive is now all of your photos are EXACTLY in the same place when restore you them.  This is very important!

    With regard to the sides, etc. This is in your catalog (LRCAT) file.  Copy your LRCAT file to your backup drives, and then restore the LRCAT file to the original location on your new internal drive.

  • More questions about registration of the plugin on a Production Server package

    I tried to review other messages (as well as the documentation for VMware) regarding the plugins installation/registration on [the customer] production servers.  Specifically, I was looking at this recent announcement:

    https://communities.VMware.com/message/2292717

    The following response was a very good point, but I was looking for a little more in detail about how other developers are doing this installation/registration:

    laurentsd: as a plugin developer, you are responsible to write an installer that customers will run to register your plugin package. You do not want to treat to run a java program directly :-)  The installation program should be easy to use.

    I was curious to know how many people have their customers to install a Web Client plugin.

    The States of doc SDK - Tutorial.html in the 'record of your plugin...» "article for the mode of production (step 1), you can:"

    Use a script program or installer to create the object of Extension data programmatically and enter this data object using the ExtensionManager.registerExtension method

    This means that the .zip file must be placed on a server access with HTTPS access.

    [Variant 1]: are most of the people having the client stores the .zip file in a HTTPS server in the customer environment?  If Yes, then I guess that the installer prompts the user to specify the URL to the zip file, which is then rolled into the Extension data' things "programmatically.

    [Variant 2]: or, most people hold their own on their own server HTTPS .zip file by using an installation program with hard coded URL value in the .zip file, and having the user simply launch the installer without entering any additional data?

    Or maybe there is an Option of [3] that I have not yet thought?

    It seems that [option2] is obviously easier for the customer, but makes it harder to make a plugin that everyone has access to.  [Variant 1] requires a bit of work for the customer, but allows the developer to restrict access to the plugin for customers who have paid for the product.  Certainly the installer can block based on the license key, but anyone with some knowledge of vSphere Client Web plugins as well as documentation 'Save your plugin package' could take a plugin .zip file and install it manually without an official Installer (when the .zip is hosted to the public).

    You must take the URL of the ZIP file as an input for your script so that all options can be supported. If the zip file is hosted in the customer environment, then the URL should point to that. If you host the zip file on your own server, then the URL should point to your server.

    You should code hard not URL that you have mentioned in the #2 option, because there are several companies and agencies Government which do not allow to connect outside of their network.

  • Question about registration of vista Toshiba - Satellite A200-1CR

    Hi all

    In my laptop Toshiba vista registration component config.exe program does not work.

    Please help me? How can I make this work?

    Hello

    You received the Toshiba Recovery CD with your beautiful Sat A200.
    I would recommend setting the notebook back to factory and after the new OS installation check settings if the Toshiba vista registration tool is working properly.

    In other cases, you can visit Toshiba Europe site and register for your laptop on the Toshiba site!

    Good luck

  • Question about registration of EBS web page


    Hello

    I have been using Open script 12.3 for the automation of the e - Business suite.

    When tried to save the actions performed with EBS\Forms, a problem as web page interactions are not saved. However, the actions of forms are saved.

    However, the normal web page navigation are saved with the help of the web registration.

    Kind regards

    Biki

    Hello

    Problem has been resolved. Change the settings options of the Internet Local Intranet.

    Steps to reproduce:

    1. go to internet options

    2. go to Security tab

    3. Select the internet zone and goto at the personal level. Identify all the properties and try to reproduce the same on the local intranet.

    4. Goto to Local intranet custom level and make the change similar to the internet.

    Thank you

    Biki

  • Question about registration granted to other roles roles

    Hello

    I'm trying find out what query lists the roles that are contained in other roles or, in other words, the roles have been granted to other roles.

    Consider the following scenario:
    create role hr_junior;
    
    grant create session                            to hr_junior;
    grant select            on hr.regions           to hr_junior;
    grant select            on hr.locations         to hr_junior;
    grant select            on hr.countries         to hr_junior;
    
    
    create role hr_senior;
    
    grant hr_junior                                         to hr_senior with admin option;
    grant insert, update, delete    on hr.employees         to hr_senior;
    grant insert, update, delete    on hr.job_history       to hr_senior;
    
    
    create role hr_manager;
    
    grant hr_senior                                         to hr_manager with admin option;
    grant all                       on hr.regions           to hr_manager;
    grant all                       on hr.locations         to hr_manager;
    grant all                       on hr.countries         to hr_manager;
    I have a query that will show me what system and object privileges have been assigned to a role, for example:
    col role        format a12
    col owner       format a12
    col table_name  format a12
    col column_name format a12
    col privilege   format a15
    col grantable   format a3
    
    select role
         , owner
         , table_name
         , column_name
         , privilege
         , grantable
      from role_tab_privs
     where role = 'HR_MANAGER'
     order by owner
            , table_name
            , column_name
            , privilege;
    
    select role
         , privilege
         , admin_option
      from role_sys_privs
     where role = 'HR_MANAGER'
     order by privilege
            , admin_option;
    But it does not show what role contains other roles (for example, it does not show that have contains hrsenior) I would like to have a showing SQL query that
    hr_manager contains hr_senior
    hr_senior contains hr_junior
    hr_junior does not contain any roles
    Question: is it possible to write a query that displays the roles that contain other roles and, if so, what is the application?

    Thank you very much for your help,

    John.

    Hello

    The question: is it possible to write a query that displays the roles that contain other roles and, if so, what is the application?

    select * from dba_role_privs where grantee in (select role from dba_roles) order by grantee;
    
    DWDB.UTAC.COM.SG$SYS> create role main_role;
    
    Role created.
    
    DWDB.UTAC.COM.SG$SYS> create role sub_role1;
    
    Role created.
    
    DWDB.UTAC.COM.SG$SYS> create role sub_role2;
    
    Role created.
    
    DWDB.UTAC.COM.SG$SYS> grant sub_role1 to main_role;
    
    Grant succeeded.
    
    DWDB.UTAC.COM.SG$SYS> grant sub_role2 to main_role;
    
    Grant succeeded.
    
    DWDB.UTAC.COM.SG$SYS> grant sub_role2 to sub_role1;
    
    Grant succeeded.
    
    DWDB.UTAC.COM.SG$SYS> select * from dba_role_privs where grantee in (select role from dba_roles) order by grantee;
    
    GRANTEE                        GRANTED_ROLE                   ADM DEF
    ------------------------------ ------------------------------ --- ---
    DBA                            DELETE_CATALOG_ROLE            YES YES
    DBA                            EXECUTE_CATALOG_ROLE           YES YES
    DBA                            EXP_FULL_DATABASE              NO  YES
    DBA                            GATHER_SYSTEM_STATISTICS       NO  YES
    DBA                            IMP_FULL_DATABASE              NO  YES
    DBA                            JAVA_ADMIN                     NO  YES
    DBA                            JAVA_DEPLOY                    NO  YES
    DBA                            OLAP_DBA                       NO  YES
    DBA                            SCHEDULER_ADMIN                YES YES
    DBA                            SELECT_CATALOG_ROLE            YES YES
    DBA                            WM_ADMIN_ROLE                  NO  YES
    DBA                            XDBADMIN                       NO  YES
    DBA                            XDBWEBSERVICES                 NO  YES
    EXECUTE_CATALOG_ROLE           HS_ADMIN_ROLE                  NO  YES
    EXP_FULL_DATABASE              EXECUTE_CATALOG_ROLE           NO  YES
    EXP_FULL_DATABASE              SELECT_CATALOG_ROLE            NO  YES
    IMP_FULL_DATABASE              EXECUTE_CATALOG_ROLE           NO  YES
    IMP_FULL_DATABASE              SELECT_CATALOG_ROLE            NO  YES
    JAVASYSPRIV                    JAVAUSERPRIV                   NO  YES
    LOGSTDBY_ADMINISTRATOR         RESOURCE                       NO  YES
    *MAIN_ROLE                      SUB_ROLE1                      NO  YES*
    *MAIN_ROLE                      SUB_ROLE2                      NO  YES*
    OLAP_DBA                       SELECT_CATALOG_ROLE            NO  YES
    OLAP_USER                      CONNECT                        NO  YES
    OLAP_USER                      OEM_MONITOR                    NO  YES
    OLAP_USER                      RESOURCE                       NO  YES
    OLAP_USER                      SELECT_CATALOG_ROLE            NO  YES
    SELECT_CATALOG_ROLE            HS_ADMIN_ROLE                  NO  YES
    *SUB_ROLE1                      SUB_ROLE2                      NO  YES*
    XDBADMIN                       XDBWEBSERVICES                 NO  YES
    
    30 rows selected.
    

    Salman

    Published by: Salman Qureshi Sep 20, 2010 13:01

    Published by: Salman Qureshi Sep 20, 2010 13:02 added example

  • Question about registration of the compositions

    Hello

    I wonder if there is a way I can quickly save an individual publication with its assets within a project.  For example: I have a project of 'Active' that I keep open as a composition in the project, I'm working on so I can quickly grab the goods I use a lot.  Sometimes, I'll create a new asset for the job I want to add to my "assets". AEP' but I can not simply copy the layers in my 'Active' composition and then save the comp. like it's own .aep file.  Instead, I need to save a project, delete everything except my asset mix and then save as Assets.aep and re - open my current project.

    Is it possible to export or save an individual model, from a project with a lot of comps, as is the project?

    Hope that makes sense...

    Thank you

    Paul

    Not directly.  In a project file duplicated (of security), you remove all unwanted comps, then select all the searched comps and use project reduce.

  • Recently bought a laptop computer; A few questions about the offer Upgrade to Windows 8

    I have a few questions about the Upgrade of Windows 8 offer for new computers.  I recently bought a Toshiba Satellite S855-S5268 of amazon.com, which came with Windows 7 Home Premium.  Toshiba already has a beta version of drivers and utilities for Windows 8 for the S855 on their Web site.

    (1) I bought my laptop in July of this year, and I've not yet registered for 8 Windows Upgrade offer with Microsoft.  Am I still eligible to receive the upgrade, if I sign up soon?
    (2) if I buy the upgrade through this offer, I'll be able to download an ISO file so I can burn the installation media, or do I need to upgrade to Windows 7?
    (3) if I will be able to burn the installation media, I'll be able to erase my hard drive and do a clean install of Windows 8 (which I'd rather do, I have a lot of backups of my data).  I am aware that I would probably need to provide my product key Windows 7 Home Premium 64-bit OEM during the new installation, because it is an upgrade and not a full version; This isn't a big deal, because my Windows 7 Home Premium 64-bit OEM product key is stuck at the bottom of my laptop.
    (4) my current copy of Windows 7 is activated by seeing my BIOS (I have a traditional BIOS, not a UEFI).  If I had to switch to Windows 8 and decide then I'd rather back in Windows 7, for example, a few months later, I'll be able to do that (I burned recovery of Windows 7 with the Toshiba utility disks, which I did), and Windows 7 will continue to activate by seeing my BIOS, even after the installation (and later remove) Windows 8?
    Thank you very much!

    I have a few questions about the Upgrade of Windows 8 offer for new computers.  I recently bought a Toshiba Satellite S855-S5268 of amazon.com, which came with Windows 7 Home Premium.  Toshiba already has a beta version of drivers and utilities for Windows 8 for the S855 on their Web site.

    (1) I bought my laptop in July of this year, and I've not yet registered for 8 Windows Upgrade offer with Microsoft.  Am I still eligible to receive the upgrade, if I sign up soon?
     
    Yes, the registration period is between June 2, 2012 to January 31, 2013.
    (2) if I buy the upgrade through this offer, I'll be able to download an ISO file so I can burn the installation media, or do I need to upgrade to Windows 7?
     
    Yes, the Upgrade Wizard of Windows 8 will allow you to create a bootable DVD or you can grab the ESD file and save it.
    (3) if I will be able to burn the installation media, I'll be able to erase my hard drive and do a clean install of Windows 8 (which I'd rather do, I have a lot of backups of my data).  I am aware that I would probably need to provide my product key Windows 7 Home Premium 64-bit OEM during the new installation, because it is an upgrade and not a full version; This isn't a big deal, because my Windows 7 Home Premium 64-bit OEM product key is stuck at the bottom of my laptop.
     
    Yes and there are better ways to reinstall Windows 8 without using the installation disc, you can use the reset and refresh.
     
     

    These steps will take you through refreshing your PC:

    · Press the Windows key + C on your keyboard to show the charms (if you use a touch screen: touch the right edge of your screen and drag your finger to the left)

    · Click settings

    · Click change PC settings

    · Click general in the left column

    · Under refresh your PC without affecting your files, click Start

    Then follow the instructions that will be provided on-screen to cool your PC.

    (4) my current copy of Windows 7 is activated by seeing my BIOS (I have a traditional BIOS, not a UEFI).  If I had to switch to Windows 8 and decide then I'd rather back in Windows 7, for example, a few months later, I'll be able to do that (I burned recovery of Windows 7 with the Toshiba utility disks, which I did), and Windows 7 will continue to activate by seeing my BIOS, even after the installation (and later remove) Windows 8?
     
    As long as you have a recovery disk which you should create or use the construction in the recovery partition, Yes, it will self activate.
    Thank you very much!
  • Hi all, I have a question re registration quote models.

    Hi all, I have a question re registration quote models. I do a site that uses the e-commerce module. The products are mainly for mining companies, so will never be sold online because they are huge. We would like to use the eCommerce module to quote however. We hope that the presentation of the initial quote of the user to have the empty fields price, at the present time, that they are filled with $0.00 but the quote sent from the CMS to be filled with the price. I can do this with a few JS, but I was wondering is it possible to have two models of quote. One filled by the customer with the order and a message like "Thank you we will be in touch" and the exact quote, sent to the MSC to be listed and side elements course.

    Hope that makes sense, thank you in advance for advice or information.

    So it turns out that I was getting the wrong direction. A friend told me that you can have a model personalized for each change of status message. And you can create as many changes as you wish.

    I think that this flexibility is one of the great things about BC. There are always several ways to solve a problem.

    So, we made a generic message for the initial quote of welcome template and have the custom business models via the change of order status that guide the user completely BLAH registration to payment.

    Good looking!

    Hope this might help someone else.

    See you soon

    Stuart

  • A few questions about the colors of Patone

    I have a few questions about patone color since it is the first time that I use. I want to use them to create a paper letterhead and business cards in two colors.

    1)

    I don't understand that no sex is more than coated patone washed out colors. I heard that it's because the way paper absorbs the inkt. That is why the same results inkt in different colors on different papers (right?). My question is why is the patone black no sex so different than black normal (c = 0 m = 0 y = 0, k = 100) or black intense:

    blacks.png

    When I print a normal document with cmyk, I can get pretty dark black color. How is it that I can't have this dark with patone color black color? Even text documents printed on a cheap printer can get a darker color than the color of Patone. He looks way too grey for me.

    (2) a first model, I want to print of patone in CMYK color (since I have like 10 different colors on a page of quick comparison). I know these CMYK colors distinguish the colors of patone and I can't get a representation of 100%. But is there a way to convert patone CMYK values?

    I hope some of you can help me with my questions.

    Thank you.

    You can get shades CMYK Pantone in Illustrator, (Swatches Panel > Open Swatch Library > color books > + PANTONE Color Bridge Coated or lying) but in my opinion, what's the point?  If you print to a digital printer, just use RGB (HSB) or CMYK. Personally, I never use CMYK called "equivalents." from Pantone

    Pantone colors are all mixed pigmented inks, which are fluorescent beyond the limits of the range of RGB and CMYK in particular. The original Pantone Matching System (PMS) was created for the printing industry. He described formulations of ink pigmented for each of its colors.

    Most digital printers (laser or inkjet) use CMYK. The range of CMYK is MUCH SMALLER than many mixed inks, printed on papers either paved or unpaved can deliver. When you specify no sex Pantone ink in artificial intelligence, according to Pantone conversion tables, HAVE "about" what will look like this color on a sheet no bed, try using CMYK. -In my opinion, this has little relevance to the real world conditions and should be avoided in most situations.

    If your project must be printed on a press printing with Pantone inks spots, then by all means, use Pantone colors. But don't trust the colors of the screen; rather get a Pantone swatch book and watch real inks on paper lying and uncoated, depending on the stock you will use on the press.

    With printing decreases rapidly for inkjet and web printers, Pantone has attempted to expand its relevance beyond the traction-date of publication (in the books and software alliances, with one such as Adobe) his old PMS inks and their supposed equivalent LAB and CMYK. I say "supposed" because even once, monitors RGB and CMYK inks can never be literally equivalent to many Pantone inks. But if you go to your project on a printing press printing, Pantone inks are still very relevant as of the "tones".

    I also put my preferences I > appearance of black both display all blacks accurately and output all blacks accurately. The only exception to this may be when you print on a digital printer, where there should be no problem checking.

    Rich black in artificial intelligence is a phenomenon of the screen, at least in the Prefs > appearance of Black, you specify also "out all inks like Rich Black"-something I'd do it EVER do so out for a real printing press. Still, I put my black people in artificial intelligence at the "output All Blacks Acurately" during a press release. If you fail to do so, then the press you will see any minor issue registration, with C, M and look at the back, especially around black characters.  UGH!

    Good luck!  :+)

  • Where can I ask a handful of general order questions about Firefox OS as a consumer and get the answers? (a forum or something similar)

    I have about seven questions about Firefox OS. I'm potentially interested in opting for a tablet that works instead of Android or iOS. I couldn't find a place to ask questions like that. Thank you!

    https://support.Mozilla.org/en-us/forums/Firefox-OS-English-Forum

    There is another option.

  • About a month ago I posted a question about iMovie and not being able to "share". I solved the problem thanks, so no more emails!

    About a month ago I posted a question about iMovie and not being able to "share". I solved the problem thanks, so no more emails!

    Hi Michael,

    If you want to stop receiving notifications by electronic mail, in the thread, that you have created, then I suggest that you follow the steps below:

    One time connected to the Apple Support communities, visit your mini profile and select manage subscriptions.

    Content

    To manage this content, you are currently subscribed and changing your preferences, select the content.

    Select next to see what content you are currently following.  Note that any thread you are responding you subscribe you automatically to this thread.

    You can select to terminate a subscription to a thread.

    Learn how to manage your subscriptions

    Take care.

  • Where and how do I ask questions about Email?

    The Commission opening thingy is complicated, I have trouble finding my way around it.  I don't know where or how questions about email.  Is there an easier way than trawling through all these icons?  Like a list or something - as you get on all other forums on the internet?

    It would be a good starting point: Mac mini

    Or the appropriate under MAC Os and system software section.

    You might also find this useful: find answers and new questions

  • Many questions about the HP 50 g

    I just ordered a HP 50 g graphic calculator! I have a few questions about this so hang on tight! What is the USB connector on the calculator? Mini-USB, micro USB, or is it a connector owner, "custom". Then, it would be possible to connect a keyboard to the HP 50 g by using the USB Port? Is there a program that would make this possible? (I doubt it would work if you plug it..) I have a Mini-USB to female USB 2.0 connector. So I could just plug the keyboard right, provided that the port on the calculator is a Mini-USB Port. If this is not so that I could use my female to female USB adaptor to connect the keyboard.

    Thanks for your help,

    Zekelegge

    Hi!, zekelegge:

    Welcome to Forum!

    The only printer I use, 50G calculators, 48GII, 39GS and 17BII +, as well as many former models, such as the 48 s/SX/G/G + / GX, 38 G, 39 G, 42, 41 C/CV/CX and 28 C/S, is the infrared printer HP 82240 b. If you can use the emulator HP50G, on the PC, the simulator of the printer, you can download, since... http://www.HPCalc.org/details.php?id=7386

    The printer... HP 82240 B

    The cable series...

    The description... http://www.allenwan.com/hpcalcserialcable/

    The original cable...

  • Question about warranty after exchanges of RAM on Satellite module series

    Hello together,

    I have a question about the warranty. My laptop is 5 months old and now I want to improve it with more RAM. I want to do it myself, and now I'm wondering if the warranty will be getting hurt.
    Thanks in advance for your answers.

    Concerning

    TiG3r

    For new models of laptops the RAM upgrade described in s operating manuals. It is public act and it shows the owner of the notebook how do RAM upgrade only.

    If Toshiba offers something like this he won't have the negative influence of valid warranty.
    Buy a compatible module and RAM upgrade.

    Bye and good luck!

Maybe you are looking for

  • can connect you to game Center, but not games

    I can connect to Game Center - under 'Me', it shows my AppleID and a few points - it shows that I have 15 games in the red and friends bubble under blue bubble, but when I click on the icons of the friends of the games I get 'No. Friends' and 'no. Ga

  • How to do back to the default size in Firefox 24 fonts? They are conveyed much too big.

    Since upgrading to Firefox 22 and 24, the size of the font has been extremely huge. The only way to make it smaller is ctrl-, but when I go to other sites the fonts are normal size. I want to be able to get the font default size on the 24 of Firefox.

  • Canon MX926 stop scaning

    Hello I'm looking for a solution as a way to use the scan of my Canon MX926 printer/Scanner/Fax function. I printed and scanned documents, with number, over the past 18 months.  The MX926 is connected to my network via Wi - Fi and shared with a MacBo

  • Satellite P20-521 - Watch Freeview?

    I have a TV Tuner on my Toshiba Satellite P20 521 (that I got with it when I bought it) were can I plug TV cable into the tuner and watch terrestrial TV normally. What I want to know is, is anyway to watch the TNT on my laptop? I have a Freeview box.

  • Code33 error 00646

    It is a disruption on my download. It always gives me 00646 33 error code. The system says something is incorrect and this do not let the driver download to update the software.