50 CHAPTER 3: CONFIGURING A WX SWITCH FOR BASIC SERVICE
Installing a Certificate from a PKCS #12 Object File To install a
public-private key pair and a certificate assigned by a CA in a PKCS #12
object file, use the following commands:
copy tftp://ip-addr/source-url [destination-url]
crypto otp admin string
crypto pkcs12 admin filename
These commands copy the PKCS #12 object file from a TFTP server to the
WX switch, configure a one-time password, and install the PKCS #12
object file. The password allows the public-private key pair and the
certificate to be installed together from the same object file. MSS
removes the password after completing the crypto pkcs12 command.
Here is an example:
WX1200# copy tftp://10.10.10.10/p12file
WX1200# crypto otp admin temppwd
WX1200# crypto pkcs12 admin p12file
Installing a Certificate from a PKCS #7 Object File To generate a
public-private key pair, and request and install a certificate assigned by a
CA in a PKCS #7 object file, use the following commands:
crypto generate key admin {512 | 1024 | 2048}
crypto generate request admin
crypto certificate admin PEM-formatted-certificate
The following commands generate a key pair and a certificate request:
WX1200# crypto generate key admin 1024
key pair generated
WX1200# crypto generate request admin
Country Name:
State Name:
Locality Name:
Organizational Name:
Organizational Unit:
Common Name: wx1@example.com
Email Address:
Unstructured Name:
CSR for admin is
-----BEGIN CERTIFICATE REQUEST-----
MIIBdTCB3wIBADA2MQswCQYDVQQGEwJV
UzELMAkGA1UECBMCQ0ExGjAYBgNVBAMU
To Next Page
Loading...
