Key And Certificate Configuration Scenarios - D-Link DWS-1008 User Manual

DWS-1008 User's Manual
Key and Certificate Configuration Scenarios
The first scenario shows how to generate self-signed certificates. The second scenario shows
how to install CA-signed certificates using PKCS #12 object files, and the third scenario
shows how to install CA-signed certificates using CSRs (PKCS #10 object files) and PKCS #7
object files.
Creating Self-Signed Certificates
To manage the security of the switch for administrative access by Web View, and the security
of communication with 802.1X users and Web AAA users, create Admin, EAP, and Web AAA
public-private key pairs and self-signed certificates. Follow these steps:
1. Set time and date parameters, if not already set.
2. Generate public-private key pairs:
DWS-1008# crypto generate key admin 1024
key pair generated
DWS-1008# crypto generate key eap 1024
key pair generated
DWS-1008# crypto generate key webaaa 1024
key pair generated
3. Generate self-signed certificates:
DWS-1008# crypto generate self-signed admin
Country Name: US
State Name: CA
Locality Name: San Francisco
Organizational Name: example
Organizational Unit: IT
Common Name: DWS-1008
Email Address: admin@example.com
Unstructured Name: DWS-1008 in wiring closet 4
Self-signed cert for admin is
-----BEGIN CERTIFICATE-----
MIICUzCCAbygAwIBAgICA+cwDQYJKoZIhvcNAQEEBQAwNjELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAkNBMRowGAYDVQQDFBF0ZWNocHVic0B0cnB6LmNvbTAeFw0wMzA0
...
Lm8wmVYLxP56MpCUAm9O8C2foYgOY40=
-----END CERTIFICATE-----
DWS-1008# crypto generate self-signed eap
Country Name: US
State Name: CA
Locality Name: San Francisco
Organizational Name: example
Organizational Unit: IT
Common Name: DWS-1008
Email Address: admin@example.com
Unstructured Name: DWS-1008 in wiring closet 4
D-Link Systems, Inc.
Managing Keys and Certificates
264