Table of Contents
Advertisement
270
C
12: M
HAPTER
ANAGING
Installing CA-Signed
Certificates from
PKCS #12 Object Files
K
C
EYS AND
ERTIFICATES
# display crypto certificate webaaa
Certificate:
Version: 3
Serial Number:
Subject: C=US, ST=CA, L=PLEAS, O=Mycorp, OU=SQA,
CN=BOBADMIN/emailAddress=BOBADMIN, unstructuredName=BOB
Signature Algorithm: md5WithRSAEncryption
Issuer: C=US, ST=CA, L=PLEAS, O=Mycorp, OU=SQA,
CN=BOBADMIN/emailAddress=BOBADMIN, unstructuredName=BOB
Validity:
Not Before: Oct 19 02:02:02 2004 GMT
Not After : Oct 19 02:02:02 2005 GMT
This scenario shows how to use PKCS #12 object files to install
public-private key pairs, CA-signed certificates, and CA certifies for
administrative access, 802.1X (EAP) access, and Web AAA access.
1 Set time and date parameters, if not already set. (See "Configuring and
Managing Time Parameters" on page 93.)
2 Obtain PKCS #12 object files from a certificate authority.
3 Copy the PKCS #12 object files to nonvolatile storage on the WX. Use the
following command:
copy tftp://filename local-filename
For example, to copy PKCS #12 files named 2048admn.p12,
20481x.p12, and 2048web.p12 from the TFTP server at the address
192.168.253.1, type the following commands:
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# copy tftp://192.168.253.1/2048admn.p12 2048admn.p12
success: received 637 bytes in 0.253 seconds [ 2517
bytes/sec]
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# copy tftp://192.168.253.1/20481x.p12 20481x.p12
success: received 637 bytes in 0.253 seconds [ 2517
bytes/sec]
999 (0x3e7)
Advertisement
Table of Contents
