Adding a local CRL file using the configuration menu

Use the menu options in this section to add a local Certificate Revocation List (CRL) file to the NDR appliance. Only one CRL file can be present on the system.

To add a local CRL file:

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter configuration CAC menu.
npadmin@ia(config)# authentication
In the CAC/PIV configuration menu, select 1 to access the Authentication Mechanism menu
Authentication Mechanisms:
1: PAM
2: LDAP
3: Radius
4: TACACS+
5: Active Directory
6: PKI
7: PKI w/ LDAP
8: PKI w/ Active Directory
C: Cancel changes and exit
Depending on the external user management system you use, select a PKI option:
1. Enter 6 if you will not configure LDAP or Active Directory with PKI for authorization.
2. Enter 7 to configure PKI with LDAP for authorization.
3. Enter 8 to configure PKI with AD for authorization.
Select Q to save your changes and exit to the configure system menu.
Enter the CAC/PIV configuration menu.
npadmin@ia(config)# authentication
Select 2 to configure PKI.
Select 1 to configure the PKI status.
Enable PKI.
Status (disabled, optional, required): optional
In the PKI Configuration menu, select 3 to enter the CRL Configuration menu. The following appears:
CRL Configuration:
1: CRL Retrieval URL = <none>
2: CRL Retrieval interval (hours between refresh) = 1
3: Upload CRL file = <none>
4: View CRL contents
5: Active Directory
6: Delete CRL file
------------------------------------------------------------
Q: Save changes and exit
C: Cancel changes and exit
Enter your choice:
Select 3 to upload a CRL file to the appliance. Upload the CRL file to /home/npscp/transfer/.
Select 2 to verify the content of the CRL file.
-----BEGIN X509 CRL----- MIIC3jCBxwIBATANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylGaXJlRXllIEVu dGVycHJpc2UgRm9yZW5zaWNzIFRlc3QgUm9vdCBDQRcNMTkwMjE5MjIxMDM2WhcN MzkwMjIwMTAzMDM2WqBfMF0wHwYDVR0jBBgwFoAUKxsMtzoR3wEUm7DBjnOOW8y9 wpYwEAYJKwYBBAGCNxUBBAMCAQAwCgYDVR0UBAMCAQIwHAYJKwYBBAGCNxUEBA8X DTM5MDIxOTIyMjAzNlowDQYJKoZIhvcNAQELBQADggIBAJ02SEL8g9K5Ygx0UH7o uRR41SOQ6XIFJIImfQyJS/x1Es+dY5MCPqvV9s3yQpPoRW+CklEWbmYYdUT5qh3j CahyhIGQDVb/89pThW+QO/qW52yzu6g0yL+PjLfa1PSTLyNJWtLhKjwzzMqwzWZp ----- END X509 CRL-----
Select X to exit the menu.