Siemens scalance WLC711 Reference Manual page 351

chainfile
permanent
permanent-chain
default
ipv6
Usage
Use the command to define certificate settings for the named topology in the current context.
cert
With the command, you can either to assign a downloaded PKCS #12 file, CSR file, or PEM/DER
cert
files to the named topology or to reset the named topology to use the factory default certificate.The
command is available from the topology:<named-topology>:l3 context of the CLI for Admin,
cert
b@ac, physical, and routed topologies.
When you use the
you must select either SCP or FTP as the file transfer mechanism and specify the PKCS#12 file, CSR file,
or PEM/DER files. The command then attempts to download the specified PKCS#12 file, CSR file, or
PEM/DER files, and, if successful, converts the PKCS#12 file, CSR file, or PEM/DER files into a certificate
and key. The command confirms that the certificate password works with the private key file then
assigns both the certificate and key to the named topology. If the indicated file name cannot be found,
this command generates an error.
Using the command with the default option removes the certificate from the named topology and
cert
assigns the factory default certificate to it.
Examples
The following example downloads a PKCS #12 certificate file and a chain certificate using FTP and
applies it to the topology named test:
WLC.siemens.com
test.pfx abc123 chain.crt
Attempting to download file using ftp ...
The following example downloads a PEM/DER certificate file, a PEM/DER key file, and a chain
certificate using FTP and applies it to the topology named test:
WLC.siemens.com
t certificate.crt privatekey.key abc123 chain.crt
Attempting to download file using ftp ...
SCALANCE WLC711 CLI Reference Guide
A PEM-formatted CA (Certification Authority) chain certificate file. If you choose to
install this optional certificate, you must do so when specifying the PCKCS #12 or
PEM/DER certificates.
Indicates that the certificate to use is already in the permanent key store. This is used
by the export and show commands to show which certificate is assigned to each
port. The certificate will then be applied to the wireless assistant virtual website
bound to the port the context of which the command was issued in.
Indicates that the chain certificate to use is already in the permanent key store. This
is used by the export and show commands to show which certificate is assigned to
each port. The certificate will then be applied to the wireless assistant virtual website
bound to the port the context of which the command was issued in.
Indicates that the interface should use the factory default certificate and key.
Specifies that the certificate is IPv6.
command to assign a PKCS #12 file, CSR file, or PEM/DER files to an interface,
cert
:topology:test:l3# cert pkcs12 ftp 1.1.1.1 test abc123 /test
:topology:test:l3# cert per-der ftp 1.1.1.1 test abc123 /test
topology Commands
cert
351