48 CHAPTER 3: CONFIGURING A WX SWITCH FOR BASIC SERVICE
(See “Installing a Certificate Assigned by a Certificate Authority” on
page 49 and “Installing a Certificate Authority’s Certificate” on
page 51.)
Generating a Self-Signed Certificate
As an alternative to using a certificate assigned by a CA, you can
generate a self-signed certificate on the WX switch. To use a self-signed
certificate generated by the WX switch, use the following commands:
crypto generate key admin {512 | 1024 | 2048}
crypto generate self-signed admin
The following commands generate a public-private key pair and a
self-signed certificate:
WX1200# crypto generate key admin 1024
key pair generated
WX1200# crypto generate self-signed admin
Country Name:
State Name:
Locality Name:
Organizational Name:
Organizational Unit:
Common Name: wx1@example.com
Email Address:
Unstructured Name:
Self-signed cert for admin is
-----BEGIN CERTIFICATE-----
MIICUzCCAbygAwIBAgICA+cwDQYJKoZIhvc
NAQEEBQAwNjELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAkNBMRowGAYDVQQDFBF0ZWNoc
HVic0B0cnB6LmNvbTAeFw0wMzA0
...
Lm8wmVYLxP56MpCUAm9O8C2foYgOY40=
-----END CERTIFICATE-----
The common name is required. The other fields are optional. Use a
common name that uniquely identifies the WX switch. Use a fully
qualified name if such names are supported on your network.
MSS automatically installs the keys and self-signed certificate into its
certificate and key store.
To Next Page
Loading...
