Table of Contents
Advertisement
264
C
12: M
HAPTER
ANAGING
Creating a CSR and
Installing a Certificate
from a PKCS #7
Object File
K
C
EYS AND
ERTIFICATES
3 Unpack the PKCS #12 object file into the certificate and key storage area
on the WX switch. Use the following command:
crypto pkcs12 {admin | eap | webaaa} filename
The filename is the location of the file on the WX switch.
MSS erases the OTP password entered with the crypto otp command
when you enter the crypto pkcs12 command.
After creating a public-private key pair, you can obtain a signed certificate
of authenticity from a CA by generating a Certificate Signing Request
(CSR) from the WX switch. A CSR is a text block with an encoded request
for a signed certificate from the CA.
Many certificate authorities have their own unique requirements. Follow
the instructions in the documentation for your CA to properly format the
fields you complete when generating a CSR.
1 To generate a request for a CA-signed certificate, use the following
command:
crypto generate request {admin | eap | webaaa}
When prompted, enter values for each of six identification fields.
You must include a common name (string) when you generate a CSR.
Use a fully qualified name if such names are supported on your network.
The other information is optional. For example:
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# crypto generate request admin
Country Name: US
State Name: MI
Locality Name: Detroit
Organizational Name: example
Organizational Unit: eng
Common Name: WX-34
Email Address: admin@example.com
Unstructured Name: south tower, wiring closet 125
When completed successfully, the command returns a Privacy-Enhanced
Mail (PEM)-formatted PKCS #10 CSR. PEM encoding is a way of
representing a non-ASCII file format in ASCII characters. The encoded
Advertisement
Table of Contents
