Cisco AP775A - Nexus Converged Network Switch 5010 User Manual

CHAPTER
Send documentation comments to mdsfeedback-doc@cisco.com
43-1
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
43
Configuring Certificate Authorities and Digital
Certificates
Public Key Infrastructure (PKI) support provides the means for the Cisco MDS 9000 Family switches to
obtain and use digital certificates for secure communication in the network. PKI support provides
manageability and scalability for IPsec/IKE and SSH.
This chapter includes the following sections:
• About CAs and Digital Certificates, page 43-1
• Configuring CAs and Digital Certificates, page 43-6
• Example Configurations, page 43-17
• Maximum Limits, page 43-36
• Default Settings, page 43-37
About CAs and Digital Certificates
This section provides information about certificate authorities (CAs) and digital certificates, and
includes the following topics:
• Purpose of CAs and Digital Certificates, page 43-2
• Trust Model, Trust Points, and Identity CAs, page 43-2
• RSA Key-Pairs and Identity Certificates, page 43-2
• Multiple Trusted CA Support, page 43-3
• PKI Enrollment Support, page 43-4
• Manual Enrollment Using Cut-and-Paste Method, page 43-4
• Multiple RSA Key-Pair and Identity CA Support, page 43-4
• Peer Certificate Verification, page 43-5
• CRL Downloading, Caching, and Checking Support, page 43-5
• OCSP Support, page 43-5
• Import and Export Support for Certificates and Associated Key Pairs, page 43-5

Cisco AP775A - Nexus Converged Network Switch 5010 Specifications

General

Brand	Cisco
Model	AP775A - Nexus Converged Network Switch 5010
Category	Switch
Language	English