Nortel 3050 Command Reference Manual page 151

Table 44
Certificate Menu Options (/cfg/cert) (cont'd.)
Command Syntax and Usage
key
revoke
Copyright © 2007 Nortel Networks
.
/cfg/cert <id> Certificate Management Configuration 151
Lets you paste the contents of a certificate file from a text editor. If the
certificate file contains both the private key and the certificate, you can
paste the entire contents at the menu prompt. In this case, you will not
need to paste the private key separately using the key command. If
the key has been password protected, you are prompted for the correct
password phrase. When using the cert command to add a certificate
to the VPN Gateway, the certificate (and key, if present) must be in the
PEM format.
If a certificate is already installed using the current certificate index
number, that certificate will be overwritten by pasting another certificate
to the same index number. Use the show command to verify that the
current certificate index number is not in use.
Note: This command cannot be used on an ASA FIPS running in FIPS
mode, if the certificate file also contains the private key, or if you need
to import the private key associated with the public key in the certificate
from an external source. Due to FIPS security requirements, FIPS mode
prohibits importing of private keys.
Lets you paste the contents of a key file from a text editor. Make sure
the key file corresponds to the public key in the related certificate file. If
the key has been password protected, you are prompted for the correct
password phrase. When using the key command to add a private key
to the VPN Gateway, the key must be in the PEM format.
If a key is already installed using the current certificate index number,
that key will be overwritten by pasting another key to the same
index number. Use the keyinfo command to verify that the current
certificate index number is not in use.
After you have added the private key you should use the validate
command to ensure that the private key matches the public key in the
current certificate.
Note: This command cannot be used on an ASA FIPS running in
FIPS mode. Due to FIPS security requirements, FIPS mode prohibits
importing of private keys.
Displays the Revocation menu. To view menu options, see
"/cfg/cert <id> /revoke Certificate Revocation Configuration"
(page 156).
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007