Adding a CA certificate to a bundle using the CLI

Use the CLI commands in this section to add a CA certificate to a bundle.

Note

The certificate name must already exist in the system.

The certificate bundle must be named client-cert-auth.

To add a CA certificate to a bundle:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Add a certificate that already has been configured to the bundle.
```
hostname (config) # crypto certificate bundle <bundle_name> cert-name <certificate_name>
```
where <bundle_name> is the name of the certificate bundle. The bundle must be named client-cert-auth.
<certificate_name> is the name of the certificate that already has been configured.

Verify the list of all the certificates that have been added to the bundle.

hostname (config) # show crypto certificate bundle client-cert-auth
Certificate bundle 'client-cert-auth':
Certificate with name 'client-cert-auth-0235cfce'
    Certificate Type:              RSA
    Private Key:                   not present
    Serial Number:                 0xd1de64fae48a6876
    SHA-1 Fingerprint:             64171a6cab5b92ae6006f851c37ed84202198690
    Validity:
        Starts:                    2016/10/07 13:11:23
        Expires:                   2026/10/05 13:11:23
    Subject:
        Common Name:               vps1_root_ca_1
        Country:                   US
        State or Province:         CA
        Locality:                  Milpitas
        Organization:              FireEye
        Organizational Unit:       CAou
    Issuer:
        Common Name:               vps1_root_ca_1
        Country:                   US
        State or Province:         CA
        Locality:                  Milpitas
        Organization:              FireEye
        Organizational Unit:       CAou
Certificate with name 'client-cert-auth-d7217279'
    Certificate Type:              RSA
    Private Key:                   not present
    Serial Number:                 0x1001
    SHA-1 Fingerprint:             6d3565c309038644b32ece8a732b2bbfdbc52460
    Validity:

        Starts:                    2016/10/10 10:46:12
        Expires:                   2026/10/08 10:46:12
    Subject:
        Common Name:               vps1_ca_3
        Country:                   US
        State or Province:         CA
        Locality:                  Milpitas
        Organization:              FireEye
        Organizational Unit:       CAou
    Issuer:
        Common Name:               vps1_root_ca_1
        Country:                   US
        State or Province:         CA
        Locality:                  Milpitas
        Organization:              FireEye
        Organizational Unit:       CAou

Save your changes.
```
hostname (config) # write memory
```