Configuring local CRL file updates using the configuration menu

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:

$ ssh npadmin@10.1.0.1

or

$ ssh npadmin@exampleFQDN

Enter privileged mode:

npadmin@ia> enable

Enter the npadmin password. The password can be 5 to 24 characters long.

[sudo] password for npadmin: <password>

Enter configuration mode:

npadmin@ia# configure system

Enter configuration CAC menu.

npadmin@ia(config)# authentication

In the CAC/PIV configuration menu, select 2 to configure the current authentication method.

In the PKI Configuration menu, select 3 to enter the CRL Configuration menu. The following appears:

Select 3 to upload a CRL file to the appliance. Upload the CRL file to /home/npscp/transfer/.

In the CRL Configuration menu, select 1 to enter the URL of the direct path to the certificate file.

The URL is specified with remote server Administrator credentials ( and ), the remote server (), the path and filename in which to save the certificate bundle () in the following format: scp://<username>[:<password>]@<hostname>/<path/filename>

Note

If you do not include the password, the configuration menu prompts for the password and obfuscates the keyboard input as you type it.

In the CRL Configuration menu, select 2 to set the time interval in hours for how often the appliance downloads a new CRL file.

Select X to exit the menu.