Key And Certificate Formats - Nortel Secure Network Access Switch 4050 User Manual

You can install new certificates or import or renew existing certificates.

Key and certificate formats

The Nortel SNAS 4050 supports importing, saving, and exporting private keys
and certificates in a number of standard formats.
supported formats.
Table 120
Supported key and certificate formats (Sheet 1 of 2)
Format
PEM*
DER
NET
PKCS12
(also known as PFX)
PKCS7
PKCS8
MS IIS 4
*You must use the PEM format when:
• you save keys and certificates by copying
• you add a key or certificate by pasting
Note: The Nortel SNAS 4050 supports keys and certificates created by
using Apache-SSL, OpenSSL, or Stronghold SSL. However, for greater
security, Nortel recommends creating keys and generating certificate
signing requests from within the Nortel SNAS 4050 system using the
CLI or SREM. This way, the encrypted private key never leaves the
Nortel SNAS 4050 and is invisible to the user.
Import/Add Export/Save Comment
Yes Yes
Yes Yes
Yes Yes
Yes Yes
Yes No
Yes No
Yes No
Chapter 11 Managing certificates 571
Encrypts the private key. Combines the private key and
certificate in the same file.
Does not encrypt the private key. Allows you to store
the private key and certificate in separate files.
Encrypts the private key. Allows you to store the
private key and certificate in separate files.
Encrypts the private key. Combines the private key and
certificate in the same file. Most browsers allow
importing a combined key and certificate file in the
PKCS12 format.
Certificate only.
Key only (used in WebLogic).
Key only (proprietary format).
Nortel Secure Network Access Switch 4050 User Guide
Table 120 summarizes the