Public Key Infrastructure (PKI) Commands
Page 162 7450 ESS System Mangement Guide
Syntax export type {cert|key|crl} input filename output url-string format output-format
[password [32 chars max]] [pkey filename]
Context admin>certificate
Description This command performs certificate operations.
gen-keypair
Syntax gen-keypair url-string [size {512|1024|2048}] [type {rsa|dsa}]
Context admin>certificate
Description This command generatse a RSA or DSA private key/public key pairs and store them in a local file in
cf3:\system-pki\key
Parameters url-string — Specifies the name of the key file.
Values url-string <local-url> - [99 chars max]
local-url <cflash-id>/<file-path>
cflash-id cf1:|cf2:|cf3:
size — Specifies the key size in bits.
possible choice are 512/1024/2048; the default value is
Default 2048
type — Specifies the type of key.
Default rsa
gen-local-cert-req
Syntax gen-local-cert-req keypair url-string subject-dn subject-dn [domain-name [255 chars
max]] [ip-addr ip-address] file url-string [hash-alg hash-algorithm]
Context admin>certificate
Description This command generates a PKCS#10 formatted certificate request by using a local existing key pair
file.
Default none
Parameters url-string — Specifies the name of the keyfile in cf3:\system-pki\key that is used to generate a
certificate request.
Values url-string <local-url> - [99 chars max]
local-url <cflash-id>/<file-path>
cflash-id cf1:|cf2:|cf3:
subject-dn — Specifies the distinguish name that is used as the subject in a certificate request,
including: