Crypto Ca Export - Cisco MDS 9124 - Fabric Switch Reference

Chapter 4 C Commands
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

crypto ca export

To export the RSA key pair and the associated certificates (identity and CA) of a trust point within a
Public-Key Cryptography Standards (PKCS) #12 format file to a specified location, use the crypto ca
export command in configuration mode.
Syntax Description
trustpoint-label
pkcs12 destination-file-url
pkcs12-password
Defaults None.
Command Modes Configuration mode.
Command History Release
3.0(1)
Usage Guidelines
You can export the identity certificate along with the associated RSA key pair and CA certificate (or
certificate chain) to a PKCS #12 format file for backup purposes. You can later import the certificate and
RSA key pair to recover from a system crash on your switch.
Examples
The following example shows how to export a certificate and key pair in PKCS #12 format.
switch# config terminal
switch(config)# crypto ca export admin-ca pkcs12 bootflash:adminid.p12 nbv123
Related Commands Command
crypto ca import
trustpoint-label
certificate
crypto ca import
trustpoint-label pkcs12
crypto key generate
rsa
OL-16217-01, Cisco MDS SAN-OS Release 3.x
crypto ca export trustpoint-label pkcs12 destination-file-url pkcs12-password
Modification
This command was introduced.
Description
Imports the identity certificate obtained from the CA to the trust point.
Imports the identity certificate and associated RSA key pair and CA
certificate (chain) to a trust point.
Generates an RSA key pair.
Specifies the name of the trust point. The maximum size is 64
characters.
Specifies a destination file in bootflash:filename format. The maximum
size is 512 characters.
Specifies the password to be used to protect the RSA private key inthe
exported file. The maximum size is 64 characters.
Cisco MDS 9000 Family Command Reference
crypto ca export
4-123