Crypto Pkcs - Nortel 2300 Series Reference

one-time-password
Defaults None.
Access Enabled.
History
Version 4.1
Usage The password allows the public-private key pair and certificate to be installed together from the same
PKCS #12 object file. WSS Software erases the one-time password after processing the crypto pkcs12
command or when you reboot the WSS.
Nortel recommends that you create a password that is memorable to you but is not subject to easy guesses or a dictionary
attack. For best results, create a password of alphanumeric uppercase and lowercase characters.
Examples The following command creates the one-time password hap9iN#ss for installing an EAP
certificate and key pair:
WSS# crypto generate otp eap
OTP set
See Also
crypto pkcs12 on page 477

crypto pkcs12

Unpacks a PKCS #12 object file into the certificate and key storage area on the WSS. This object file contains a public-
private key pair, a WSS certificate signed by a certificate authority, and the certificate authority's certificate.
Syntax
crypto pkcs12 {admin | eap | web} file-location-url
admin
eap
Password of at least 1 alphanumeric character, with no spaces, for
clients other than Microsoft Windows clients. The password must
be the same as the password protecting the PKCS #12 object file.
Note: On a WSS that handles communications to and from
Microsoft Windows clients, use a one-time password of
31 characters or fewer.
The following characters cannot be used as part of the one-time
password of a PKCS #12 file:
• Quotation marks (" ")
• Question mark (?)
• Ampersand (&)
webaaa option renamed to web
hap9iN#ss
Unpacks a PKCS #12 object file for an administrative certificate
and key pair—and optionally the certificate authority's own
certificate—for authenticating the WSS to WLAN Management
Software or Web View.
Unpacks a PKCS #12 object file for an EAP certificate and key
pair—and optionally the certificate authority's own certificate—for
authenticating the WSS to 802.1X supplicants (clients).
Nortel WLAN—Security Switch 2300 Series Command Line Reference
Cryptography Commands 487