Table of Contents
Advertisement
272
C
12: M
HAPTER
ANAGING
Installing CA-Signed
Certificates Using a
PKCS #10 Object File
(CSR) and a PKCS #7
Object File
K
C
EYS AND
ERTIFICATES
# crypto pkcs12 admin 2048admn.p12
Unwrapped from PKCS12 file:
keypair
device certificate
CA certificate
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# crypto pkcs12 eap 20481x.p12
Unwrapped from PKCS12 file:
keypair
device certificate
CA certificate
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# crypto pkcs12 web 2048web.p12
Unwrapped from PKCS12 file:
keypair
device certificate
CA certificate
MSS erases the OTP password entered with the crypto otp command
when you enter the crypto pkcs12 command.
This scenario shows how to use CSRs to install public-private key pairs,
CA-signed certificates, and CA certifies for administrative access, 802.1X
(EAP) access, and Web AAA access.
1 Set time and date parameters, if not already set. (See "Configuring and
Managing Time Parameters" on page 93.)
2 Generate public-private key pairs:
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# crypto generate key admin 1024
key pair generated
Advertisement
Table of Contents
