Security Certificate and key management
Digi TransPort WR Routers User Guide
88
Certificate and key management
This section covers concepts and tasks for managing certificates and private keys.
n Create a private key file
n Create a Diffie Hellman key file
n List private key files
n Create a certificate signing request (CSR)
n Upload a private key file
n Delete a private key file
Create a private key file
Command line
To create a private key file, use the pki command. For example:
digi.router> pki privkey testpriv.key 204
You can optionally encrypt the file using either the aes128 or aes256 options. If you choose to encrypt
the file, you must provide a password that must be at least four characters in length. For example:
digi.router> pki privkey testpriv.key 2048 aes128 hello
Create a Diffie Hellman key file
Command line
To create a Diffie Hellman key file, use the pki command. For example:
digi.router> pki dh-file openvpndh.pem 2048
Creating Diffie Hellman file openvpndh.pem, 2048 bits
Note Generating a Diffie Hellman file can take up to 40 minutes. Make sure the default for command
line timeout allows enough time to generate the file or the command will terminate. See the system
timeout parameter for details on changing the command line timeout default.
List private key files
Command line
To list private key files, use the pki command. For example:
digi.router> pki list
Private key files
------------------------
tespriv.key
anotherpriv.key
To Next Page
Loading...
