revocation-check ocsp

Description

Enables certificate revocation checking for the current profile using the online certificate status protocol (OCSP).

The no form of this command disables certificate revocation checking for the current profile.

Command context

config-ta-<TA-NAME>

Authority

Administrators

Examples

Enabling revocation checking for the TA profile my-root-cert:

switch(config)# crypto pki ta-profile my-root-cert
switch(config-ta-my-root-cert)# revocation-check ocsp

Disabling revocation checking for the TA profile my-root-cert:

switch(config)# crypto pki ta-profile my-root-cert
switch(config-ta-my-root-cert)# no revocation-check