Offline Certificate Enrollment

Offline certificate enrollment works as follows:

An operator generates a certificate request by supplying identity information.
The ERX router creates a certificate request file and makes it available to the operator.
The operator supplies the certificate request file to a CA for approval, typically by copying and pasting the file to a Web page.
The CA approves the request and generates a certificate.
The operator copies the certificate file onto the ERX router so that it can be used for IKE negotiations.