Rsakeypair - Cisco MDS 9124 - Fabric Switch Reference

rsakeypair

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
rsakeypair
To configure and associate the RSA key pair details to a trust point, use the rsakeypair command in trust
point configuration submode. To disassociate the RSA key pair from the trust point, use the no form of
the command.
Syntax Description key-pair-label
key-pair-size
Defaults The default key pair size is 512 if the key pair is not already generated.
Command Modes
Trust point configuration submode.
Command History Release
3.0(1)
Usage Guidelines Only one RSA key pair can be associated with a trust point CA, even though the same key pair can be
associated with many trust point CAs. This association must occur before enrolling with the CA to obtain
an identity certificate. If the key pair had been generated previously (using the crypto key generate
command), then the key pair size, if specified, should be the same as that was used during generation. If
the specified key pair is not yet generated, it will be generated during enrollment using the crypto ca
enroll command.
The no form of the rsakeypair command disassociates (but never destroys) the key pair from the trust
point. Before issuing the no rsakeypair command, first remove the identity certificate, if present, from
the trust point C. Doing so ensures the consistency of the association between the identity certificate and
the key pair for a trust point
Examples The following example shows how to associate an RSA key pair to a trust point.
switch# config terminal
switch(config)# crypto ca trustpoint admin-ca
switch(config-trustpoint)# rsakeypair adminid-key
The following example shows how to disassociate an RSA key pair from a trust point.
switch(config-trustpoint)# no rsakeypair adminid-key
Cisco MDS 9000 Family Command Reference
20-36
rsakeypair key-pair-label [key-pair-size]
no rsakeypair key-pair-label [key-pair-size]
Specifies a name for the RSA key pair. The maximum size is 64 characters.
Specifies a size for the RSA key pair. The size can range from 512 to 2048.
Modification
This command was introduced.
Chapter 20
OL-16217-01, Cisco MDS SAN-OS Release 3.x
R Commands