Cisco Broadband Cable Command Reference Guide

docsis cvc test
docsis cvc test
5-42
Cisco Broadband Cable Command Reference Guide
Chapter 5 Cable CPE Commands
To test the root CA public key and CM private key that are installed on the router, use the docsis cvc test
command in global configuration mode.
Cisco uBR905 and Cisco uBR925 cable access routers, and Cisco CVA122 Cable Voice Adapter
docsis cvc test
Syntax Description This command has no arguments or keywords.
Defaults No default behavior or values.
Command Modes Global configuration
Command History
Release Modification
12.2(8)YI This command was introduced on the Cisco uBR905 and Cisco uBR925
cable access routers, and the Cisco CVA122 Cable Voice Adapter.
Usage Guidelines This command verifies that the root CA public key and the private key that are installed in the router at
the factory are valid. The command uses the root CA public key to encrypt a string, and then it uses the
router’s private key to decrypt the key.
Typically, the root CA public key and private key are installed at the factory and never need to be
updated. However, DOCSIS allows the keys to be updated as part of the secure software download
procedure. If this occurs, you can use the docsis cvc test command to verify that the keys are valid and
are properly installed.
Examples The following example shows a typical successful result of the docsis cvc test command:
Router# config terminal
Router(config)# docsis cvc test
Encrypted sting: This is a test
Encrypt result: xxxxxxxxxxxxxxxxxxxxxxxxxxx
Decrypt result: This is a test
Router(config)#
Note If the decrypt result is not “This is a test,” then the test failed, which indicates that either the public key
or the private key is not valid.
OL-1581-05