create trustpoint
To add a new trustpoint for validation of a certificate during Internet Key Exchange (IKE) authentication, use
the create trustpoint command. If a connection with the specified name already exists, the command will
fail.
To add or edit a trustpoint, use the enter trustpoint command. If the specified trustpoint does not exist, it is
created and entered; if the trustpoint exists, it is entered.
You also can use the scope form of this command to enter an existing trustpoint to assign or change properties.
To delete an existing trustpoint, use the delete form of this command.
create trustpoint name
delete trustpoint name
enter trustpoint name
scope trustpoint name
Syntax Description
The trustpoint name; can be up to 32 alphanumeric characters.
name
Command Modes
scope security/
Command History
ModificationRelease
Command added.1.1(1)
Usage Guidelines
Use this command to identify trustpoints that will be used to validate certificates during Internet Key Exchange
(IKE) authentication.
When you create a new trustpoint, you are automatically entered into security/trustpoint mode with an asterisk
indicating the new trustpoint is not yet committed. After you create a trustpoint, the name cannot be changed.
You must delete the trustpoint and create a new one.
Example
This example shows how to create and enter a trustpoint:
firepower # scope security
firepower /security # enter trustpoint tPoint4
firepower /security/trustpoint* #
Related Commands
DescriptionCommand
Sets certificate information for a trustpoint.set certchain
Shows current trustpoint information.show trustpoint
Cisco Firepower 4100/9300 FXOS Command Reference
79
A – R Commands
create trustpoint