Alternatively, you can enroll by creating a file using much the same form as for online enrollment. Once you have created a request file, you can either e-mail it to the CA and receive a certificate back or you can access the CA's Web site and cut and paste the enrollment request in the area that the CA provides.
To enroll through a file request, use the following procedure:
On the Certificate Enrollment dialog box, click File as the certificate type.
Click one of the following file types:
Binary encoded--A base-2 PKCS10 file (Public Key Cryptography Standard; for example, an X.509 DER file). You cannot display a binary-encoded file.
Base 64 encoded--An ASCII-encoded PKCS10 file that you can display in text format. Choose this type when you want to cut and paste the text into the CA Web site.
In the Filename field, enter the full pathname for the file request.
When you browse for an appropriate directory for placing the file request, the Certificate Manager shows only the files of the chosen file type.
You can save your file enrollment requests in the Certificates directory, which is a subdirectory of the directory where the VPN Client is installed.
An example of a complete pathname is c:
\program files\cisco systems\vpn client\certificates\p10req3.p10.
In the New Password field, enter the password that protects this certificate. If your connection entry requires certificate authentication, you must enter this password each time you connect. The password can be up to 32 characters in length. Passwords are case sensitive. For example, sKate8 and Skate8 are different passwords.
Click Next. The VPN Client displays page two of the form. This form is the same as the one used for enrolling via the network. See "<paranum><paratext>".
Copyright © 1998-2004, Cisco Systems, Inc. All rights reserved.