Cisco 9134 - MDS Multilayer Fabric Switch User Manual

Send documentation comments to mdsfeedback-doc@cisco.com
24-5
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
OL-9285-05
Chapter 24 Troubleshooting Digital Certificates
Digital Certificate Issues
Cannot Export Identity Certificate in PKCS#12 Format
Symptom Cannot export identity certificate in PKCS#12 format.
Certificate Fails at Peer
Symptom Certificate fails at peer.
Configuring Certificates on the MDS Switch Using Fabric Manager
To configure certificates on an MDS switch using Fabric Manager, follow these steps:
Step 1 Choose Switches and set the LogicalName field to configure the switch host name.
Step 2 Choose Switches > Interfaces > Management > DNS and set the DefaultDomainName field to
configure the DNS domain name for the switch.
Step 3 Follow these steps to create an RSA key pair for the switch:
a. Choose Switches > Security > PKI and select the RSA Key-Pair tab.
b. Click Create Row and set the name and size field.
c. Check the Exportable check box and click Create.
Table 24-3 Cannot Export Identity Certificate in PKCS#12 Format
Symptom Possible Cause Solution
Cannot export
identity certificate in
PKCS#12 format.
RSA keys not exportable. Create exportable RSA keys. Choose Switches > Security
> PKI in Fabric Manager and click Create Row. Check the
Exportable check box and create an RSA key pair.
Or use the crypto key generate rsa exportable CLI
command.
Table 24-4 Certificate Fails at Peer
Symptom Possible Cause Solution
Certificate fails at
peer.
FQDN changed after certificate was
issued.
Revoke certificate and re-create. See the “Configuring
Certificates on the MDS Switch Using Fabric Manager”
section on page 24-5 or the “Configuring Certificates on
the MDS Switch Using the CLI” section on page 24-7.
Local and remote clocks are not
synchronized.
If the clocks are not synchronized, the certificate may
appear to be expired. Validate the clocks on the local and
peer device.
Peer does not recognize CA issuing the
certificate.
Create a certificate for the CAs known to the peer device.
See the “Configuring Certificates on the MDS Switch
Using Fabric Manager” section on page 24-5 or the
“Configuring Certificates on the MDS Switch Using the
CLI” section on page 24-7.

Cisco 9134 - MDS Multilayer Fabric Switch Specifications

General

Brand	Cisco
Model	9134 - MDS Multilayer Fabric Switch
Category	Switch
Language	English