PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Router# configure terminal
Router(config)#
Step 2
(Optional) Specifies the serial number of the
manufacturer CA certificate to be added as a
trusted certificate.
cable privacy add-certificate manufacturer
serial-number
Example:
Router(config)# cable privacy
Step 3
add-certificate manufacturer 000102
Router(config)#
Exits global configuration mode.exit
Example:
Router(config)# exit
Router#
Step 4
Adding a Certificate as a Trusted Certificate Using SNMP Commands
You can also use an SNMP manager to create and add certificates to the CMTS list of trusted certificates by
manipulating the tables and attributes in the DOCS-BPI-PLUS-MIB . To add a manufacturer’s certificate, add
an entry to the docsBpi2CmtsCACertTable table. Specify the following attributes for each entry:
• docsBpi2CmtsCACertStatus—Set to 4 to create the row entry.
• docsBpi2CmtsCACert—The hexadecimal data, as an X509Certificate value, for the actual X.509
certificate.
• docsBpi2CmtsCACertTrust—An Integer value from 1 to 4 specifying the certificate’s trust status:
1=trusted, 2=untrusted, 3= chained, 4=root. Specify 1 for certificates that should be trusted and 3 for
chained certificates that should be verified with the root certificate.
Similarly, to add a CM certificate to the list of trusted certificates, add an entry to the
docsBpi2CmtsProvisionedCmCertTable table. Specify the following attributes for each entry:
• docsBpi2CmtsProvisionedCmCertStatus—Set to 4 to create the row entry.
• docsBpi2CmtsProvisionedCmCert—The hexadecimal data, as an X509Certificate value, for the actual
X.509 certificate.
• docsBpi2CmtsProvisionedCmCertTrust—An Integer value from 1 to 2 specifying the certificate’s trust
status: 1=trusted, 2=untrusted. Specify 1 for CM certificates that should be trusted.
Cisco cBR Series Converged Broadband Routers Quality of Services Configuration Guide for Cisco IOS XE
Fuji 16.7.x
54
DOCSIS 1.1 for the Cisco CMTS Routers
Adding a Manufacturer’s Certificate as a Trusted Certificate