Skip to main content

security config ocsp enable

Contributors
Suggest changes
PDFs

Enable OCSP for one or more selected applications

Availability: This command is available to cluster administrators at the advanced privilege level.

Description

The security config ocsp enable command enables the OCSP-based certificate status check for applications supporting SSL/TLS communications. For more information about the OCSP-based certificate status check for applications supporting SSL/TLS communications, see the security config ocsp show command.

Parameters

-application <SSL/TLS Application supporting OCSP>,…​ - List of Applications (privilege: advanced)

Use this parameter to specify the application to enable the OCSP support. To enable all applications, the value 'all' can be used. Note: You cannot specify the value 'all' with other applications.

Examples

The following example enables the OCSP support for AutoSupport and EMS applications:

cluster1::*> security config ocsp enable -application autosupport,ems

cluster1::> security config ocsp show
Application          OCSP Enabled?
-------------------- -------------
autosupport          true
audit_log            false
fabricpool           false
ems                  true
kmip                 false
ldap                 false
ssh                  true
6 entries were displayed.

The following example enables the OCSP support for all applications:

cluster1::*> security config ocsp enable -application all
Warning: OCSP will be enabled for all applications. Any previous modifications
         will be ignored.
         Do you want to continue? {y|n}: y

cluster1::*> security config ocsp show
Application          OCSP Enabled?
-------------------- -------------
autosupport          true
audit_log            true
fabricpool           true
ems                  true
kmip                 true
ldap                 true
ssh                  true
6 entries were displayed.