Table of Contents
Advertisement
Chapter 11. Crypto configuration mode
This chapter provides an alphabetic listing of commands that are available in
Crypto configuration mode. To enter this configuration mode, use the Global
crypto command.
All of the commands that are listed in "Common commands" on page 2 and most,
but not all, of the commands that are listed in Chapter 114, "Monitoring
commands," on page 949 are also available in this configuration mode.
certificate
Creates an alias for an X.509 certificate stored on the local flash.
Syntax
certificate certificate-alias URL password password [ignore-expiration]
certificate certificate-alias URL password-alias password-alias [ignore-expiration]
no certificate
Parameters
certificate-alias
URL
password password
password-alias password-alias
ignore-expiration
© Copyright IBM Corp. 1999, 2008
Specifies an alias for a stored certificate.
The name can contain a maximum of 32 characters. For restrictions, refer to
"Object name conventions" on page xxiv.
Specifies a local URL that identifies the file that contains the certificate.
v If stored in the public cryptographic area, takes the pubcert:///filename
form.
v If stored in the private cryptographic area, takes the filename form.
Specifies the plaintext password required to access the certificate file.
Specifies the alias for the encrypted password required to access the
certificate file.
Specifies an optional keyword to allow the creation of a certificate prior to
its activation date (the NotBefore value in the certificate) or after its
expiration date (the NotAfter value in the certificate). Although the
certificate is in the up state, objects that reference the certificate use the
internal expiration values.
In other words, the certificate itself is in the up state, but Validation
Credentials, Firewall Credentials, or Identification Credentials that
references the certificate adhere to the internal expiration values. If the
certificate is used for a certificate chain validation from a Validation
Credentials and the certificate is not valid, validation fails. Similarly, if the
certificate is used from an Identification Credentials, the DataPower
213
Advertisement
Table of Contents
