Which enrollment method does a Cisco IOS VPN router trustpoint use to install a Certificate
Authority Proxy Function certificate for LSC validation of a Cisco IP phone client?

A.
HTTP proxy server

B.
certificate authority server URL

C.
terminal

D.
self-signed

E.
registration authority

Explanation:
Router(config)#crypto pki trustpoint CAPF
enrollment terminal
authorization username subjectname commonname
revocation-check none
Router(config)#crypto pki authenticate CAPF
Router(config)#
Things to Note:
The enrollment method is terminal because the certificate has to be manually installed on the
Router.
http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/authenticationauthorization-accounting-aaa/116313-configure-anyconnect-00.html