2-5
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Chapter 2 SSL Configuration Quick Starts
RSA Certificate and Key Import Quick Start
Table 2-2 provides an overview of the steps required to import and associate an
RSA certificate and key pair to the CSS from a remote server.
Table 2-2 RSA Certificate and Key Import Quick Start
Task and Command Example
1. Define a secure File Transfer Protocol (FTP) record file to import
certificates and private keys into the CSS from an SFTP server.
# ftp-record ssl_record 192.168.19.21 johndoe “abc123”
/home/johndoe
2. Use secure FTP to transfer the imported certificates and private keys to the
CSS.
# copy ssl sftp ssl_record import rsacert.pem PEM “passwd123”
Connecting
Completed successfully
# copy ssl sftp ssl_record import rsakey.pem PEM “passwd123”
Connecting
Completed successfully
3. Enter configuration mode.
# config
(config) #
4. To use RSA public key exchange and authentication:
a. Associate the imported RSA certificate with a file.
(config) # ssl associate cert myrsacert1 rsacert.pem
b. Associate the imported RSA key pair with a file.
(config) # ssl associate rsakey myrsakey1 rsakey.pem
5. Compare the public key in the associated certificate with the public key
stored with the associated private key and verify that they are identical.
(config) # ssl verify myrsacert1 myrsakey1
Certificate mycert1 matches key mykey1