Reviewing certificates and settings

Enable CLI configuration mode.

hostname > enable
hostname # configure terminal
                  

Review the certificates and certificate settings:

hostname (config) # show hx pki

The following is sample output from this command:

HX PKI Configuration:


Prefix: <prefix>
Agent CA days: 7300
Agent CA key bits: 2048
Agent cert days: 1825
Server CA days: 7300
Server cert key bits: 2048
Server cert days: 1825
Server CRL days: 30

Provisioning cert use enabled: yes

CA:     comms
        valid from: <timestamp> to <timestamp>
        subject: <subject>
        fingerprint: <fingerprint>

CA:     distro
        valid from: <timestamp> to <timestamp>
        subject: <subject>
        fingerprint: <fingerprint>

CA:     agent
        valid from: <timestamp> to <timestamp>
        subject: <subject>
        fingerprint: <fingerprint>

CRL:    comms
        issued: <timestamp> and expires on <timestamp>
        number: <comms_CRL_number>
        fingerprint: <fingerprint>

CRL:    distro
        issued: <timestamp> and expires on <timestamp>
        number: <distro_CRL_number>
        fingerprint: <fingerprint>

host:   <HX_appliance_hostname>
        role: ca
        last ping: <timestamp>