Adding a local CRL file using the configuration menu

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:

$ ssh npadmin@10.1.0.1

or

$ ssh npadmin@exampleFQDN

Enter privileged mode:

npadmin@ia> enable

Enter the npadmin password. The password can be 5 to 24 characters long.

[sudo] password for npadmin: <password>

Enter configuration mode:

npadmin@ia# configure system

Enter configuration CAC menu.

npadmin@ia(config)# authentication

In the CAC/PIV configuration menu, select 1 to access the Authentication Mechanism menu

Authentication Mechanisms:

1: PAM

2: LDAP

3: Radius

4: TACACS+

5: Active Directory

6: PKI

7: PKI w/ LDAP

8: PKI w/ Active Directory

C: Cancel changes and exit

Depending on the external user management system you use, select a PKI option:

Select Q to save your changes and exit to the configure system menu.

Enter the CAC/PIV configuration menu.

npadmin@ia(config)# authentication

Select 2 to configure PKI.

Select 1 to configure the PKI status.

Enable PKI.

Status (disabled, optional, required): optional

In the PKI Configuration menu, select 3 to enter the CRL Configuration menu. The following appears:

CRL Configuration:

1: CRL Retrieval URL = <none>

2: CRL Retrieval interval (hours between refresh) = 1

3: Upload CRL file = <none>

4: View CRL contents

5: Active Directory

6: Delete CRL file

------------------------------------------------------------

Q: Save changes and exit

C: Cancel changes and exit

Enter your choice:

Select 3 to upload a CRL file to the appliance. Upload the CRL file to /home/npscp/transfer/.

Select 2 to verify the content of the CRL file.

-----BEGIN X509 CRL----- MIIC3jCBxwIBATANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylGaXJlRXllIEVu dGVycHJpc2UgRm9yZW5zaWNzIFRlc3QgUm9vdCBDQRcNMTkwMjE5MjIxMDM2WhcN MzkwMjIwMTAzMDM2WqBfMF0wHwYDVR0jBBgwFoAUKxsMtzoR3wEUm7DBjnOOW8y9 wpYwEAYJKwYBBAGCNxUBBAMCAQAwCgYDVR0UBAMCAQIwHAYJKwYBBAGCNxUEBA8X DTM5MDIxOTIyMjAzNlowDQYJKoZIhvcNAQELBQADggIBAJ02SEL8g9K5Ygx0UH7o uRR41SOQ6XIFJIImfQyJS/x1Es+dY5MCPqvV9s3yQpPoRW+CklEWbmYYdUT5qh3j CahyhIGQDVb/89pThW+QO/qW52yzu6g0yL+PjLfa1PSTLyNJWtLhKjwzzMqwzWZp ----- END X509 CRL-----

Select X to exit the menu.