Creating Public-Private Key Pairs; Generating Self-Signed Certificates - 3Com 3CRWX120695A, 3CRWX440095A Configuration Manual

262 C 12: M
HAPTER ANAGING
Creating
Public-Private Key
Pairs
Generating
Self-Signed
Certificates
K C
EYS AND ERTIFICATES
To use a self-signed certificate or Certificate Signing Request (CSR)
certificate for WX switch authentication, you must generate a
public-private key pair.
To create a public-private key pair, use the following command:
crypto generate key {admin | eap | ssh | webaaa}
{512 | 1024 | 2048}
Choose the key length based on your need for security or to conform
with your organization's practices. For example, the following command
generates an administrative key pair of 1024 bits:
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# crypto generate key admin 1024
admin key pair generated
After you generate or install a certificate (described in the following
sections), do not create the key pair again. If you do, the certificate might
not work with the new key, in which case you will need to regenerate or
reinstall the certificate.
After creating a public-private key pair, you can generate a self-signed
certificate. To generate a self-signed certificate, use the following
command:
crypto generate self-signed {admin | eap | webaaa}
When you type the command, the CLI prompts you to enter information
to identify the certificate. For example:
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# crypto generate self-signed admin
Country Name: US
State Name: CA
Locality Name: San Jose campus
Organizational Name: mycorp
Organizational Unit: eng
Common Name: WX1