Controlling Management Access 223
Configuring HTTP and HTTPS Access
Beginning in Privileged EXEC mode, use the following commands to specify 
HTTP and HTTPS server settings on the switch.
show crypto key pubkey-
chain ssh [username 
username
] [fingerprint 
bubble-babble|hex]
View SSH public keys stored on the switch.
•
username
 — Specifies the remote SSH client username. 
(Range: 1–48 characters)
•
bubble-babble
 — Fingerprints in Bubble Babble format.
•
hex
 — Fingerprint in Hex format. If fingerprint is 
unspecified, it defaults to Hex format.
show crypto key 
mypubkey [rsa|dsa]
View the SSH public keys of the switch.
Command Purpose
configure Enter Global Configuration mode.
ip http server Enable HTTP access to the switch (enabled by default).
crypto certificate 
number
 generate
Generate a self-signed HTTPS certificate and enter into 
Crypto Certificate Generation mode.
•
number
 — Specifies the certificate number. (Range: 1–2)
common-name 
name
Specifies the common name.
country 
name
Specifies the country name.
duration 
days
Specifies number of days a self-signed certification would 
be valid. If unspecified defaults to 365 day.
email 
email_address
Specifies the contact email address.
key-generate 
length
Specify the length of the SSL's RSA key. If unspecified, 
length defaults to 1024.
location 
name
Specifies the location or city name.
organization-name 
name
Specifies the organization name
organization-unit 
name
Specifies the organization internal unit
state 
name
Specifies the state or province name.
Command Purpose