Home » Cisco » 400-051 » Which enrollment method does a Cisco IOS VPN router trustpoint use to install a Certificate Authority Proxy Function certificate for LSC validation of a Cisco IP phone client?
Which enrollment method does a Cisco IOS VPN router trustpoint use to install a Certificate Authority Proxy Function certificate for LSC validation of a Cisco IP phone client?
A. HTTP proxy server
B. certificate authority server URL
C. terminal
D. self-signed
E. registration authority
Correct Answer: C
Explanation/Reference:
Explanation:
1. Router(config)#crypto pki trustpoint CAPF
enrollment terminal
authorization username subjectname commonname
revocation-check none
Router(config)#crypto pki authenticate CAPF
Router(config)#
Things to Note:
. The enrollment method is terminal because the certificate has to be manually installed on the Router.
Reference: http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/authentication-authorization-accounting-aaa/116313-configure-anyconnect-00.html
