crypto certificate generate 387
■ common- name — Specifies the fully qualified URL or IP address of the
device. (Range: 1-64)
■ organization — Specifies the organization name. (Range: 1-64)
■ organization-unit — Specifies the organization-unit or department
name.(Range: 1-64)
■ location — Specifies the location or city name. (Range: 1-64)
■ state — Specifies the state or province name. (Range: 1-64)
■ country — Specifies the country name. (Range: 2-2)
■ days — Specifies number of days certification is valid. (Range:
30-3650)
Default Configuration
The Certificate and SSL’s RSA key pairs do not exist.
If no RSA key length is specified, the default length is 1024.
If no URL or IP address is specified, the default common name is the
lowest IP address of the device at the time that the certificate is
generated.
If the number of days is not specified, the default period of time that the
certification is valid is 365 days.
Command Mode
Global Configuration mode
User Guidelines
The command is not saved in the device configuration; however, the
certificate and keys generated by this command are saved in the private
configuration (which is never displayed to the user or backed up to
another device).
Use this command to generate a self-signed certificate for the device.
If the RSA keys do not exist, parameter key-generate must be used.
Example
The following example regenerates an HTTPS certificate.
Console(config)# crypto certificate 1 generate key-generate
To Next Page
Loading...
