54 CHAPTER 3: CONFIGURING A WX SWITCH FOR BASIC SERVICE
These commands copy the PKCS #12 object file from a TFTP server to the
WX switch, configure a one-time password, and install the PKCS #12
object file. The password allows the public-private key pair and the
certificate to be installed together from the same object file. MSS
removes the password after completing the crypto pkcs12 command.
Installing a Certificate for Network Users from a PKCS #7 Object
File
To generate a public-private key pair, and request and install a certificate
assigned by a CA in a PKCS #7 object file, use the following commands:
crypto generate key eap {1024 | 2048}
crypto generate request eap
crypto certificate eap PEM-formatted-certificate
After you submit the certificate request to a CA and receive a signed
certificate from the CA as a PKCS #7 object file, install the certificate into
the WX switch’s certificate and key store:
1 Open the PKCS #7 object file with an ASCII text editor (such as Notepad).
2 Type the crypto certificate eap command at the WX switch’s command
prompt.
3 After the prompt, paste the PKCS #7 object file into the CLI. For example:
WX1200# crypto certificate eap
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIGDDCCBbagAwIBAgIKFrJ2aAAAAA
AAnDANBgkqhkiG9w0BAQUFADCBmzErMCkG
CSqGSIb3DQEJARYcYWRtaW5pc3RyYX
RvckB0cmFwZXplc3FhLmNvbTELMAkGA1UE
...
bDQNTaS4W0ytUGuJm1RjyA==
-----END CERTIFICATE-----
You must paste the entire block, from the beginning:
-----BEGIN CERTIFICATE REQUEST----- to the end:
-----END CERTIFICATE REQUEST-----. The certificate server and MSS
recognize the block only through the beginning and ending delimiters.
To Next Page
Loading...
