Cisco AP775A - Nexus Converged Network Switch 5010 User Manual

Send documentation comments to mdsfeedback-doc@cisco.com
43-17
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 43 Configuring Certificate Authorities and Digital Certificates
Example Configurations
Step 4 Click Yes or No in the Confirmation dialog box.
Note After you delete RSA key-pairs from a switch, ask the CA administrator to revoke your switch’s
certificates at the CA. You must supply the challenge password you created when you originally
requested the certificates. See “Generating Certificate Requests” section on page 43-12.
Example Configurations
This section shows an example of the tasks you can use to configure certificates and CRLs on the Cisco
MDS 9000 Family switches using the Microsoft Windows Certificate server.
This section includes the following topics:
• Configuring Certificates on the MDS Switch, page 43-17
• Downloading a CA Certificate, page 43-19
• Requesting an Identity Certificate, page 43-24
• Revoking a Certificate, page 43-30
• Generating and Publishing the CRL, page 43-33
• Downloading the CRL, page 43-34
• Importingthe CRL, page 43-36
Configuring Certificates on the MDS Switch
To configure certificates on an MDS switch using Fabric Manager, follow these steps:
Step 1 Choose Switches and set the LogicalName field to configure the switch host name.
Step 2 Choose Switches > Interfaces > Management > DNS and set the DefaultDomainName field to
configure.
Step 3 To create an RSA key-pair for the switch, follow these steps:
a. Choose Switches > Security > PKI and select the RSA Key-Pair tab.
b. Click Create Row and set the name and size field.
c. Check the Exportable check box and click Create.
Step 4 To create a trust point and associate the RSA key-pairs with it, follow these steps:
a. Choose Switches > Security > PKI and select the Trustpoints tab.
b. Click Create Row and set the TrustPointName field.
c. Select the RSA key-pairs from the KeyPairName drop-down menu.
d. Select the certificates revocation method from the CARevoke drop-down menu.
e. Click Create.
Step 5 Choose Switches > Copy Configuration and click Apply Changes to copy the running to startup
configuration and save the trustpoint and key pair.

Cisco AP775A - Nexus Converged Network Switch 5010 Specifications

General

Brand	Cisco
Model	AP775A - Nexus Converged Network Switch 5010
Category	Switch
Language	English