Rsakeypair (Trustpoint Configuration Mode) - Allied Telesis x310-26FT Command Reference Manual

P K I C
UBLIC EY NFRASTRUCTURE OMMANDS
(
RSAKEYPAIR TRUSTPOINT CONFIGURATION MODE

rsakeypair (trustpoint configuration mode)

Overview Use this command to declare which RSA key pair should be used to enroll the local
server with the trustpoint. Note that this defines the key pair used with the server
certificate, not the key pair used with the root CA certificate.
Use the no variant of this command to restore the default value, "server-default".
Syntax rsakeypair <keylabel> [<1024-4096>]
no rsakeypair
Default The default value for keylabel is "server-default".
The default value for the key bit length is 2048.
Mode Trustpoint Configuration
Usage If the label specified does not refer to an existing key created by the crypto key
generate rsa command, the key will be implicitly generated when the crypto pki
enroll command is issued to generate the server certificate or the server certificate
signing request. The optional numeric parameter defines the bit length for the key,
and is only applicable for keys that are implicitly created during enrollment.
This command does not affect server certificates or server certificate signing
requests that have already been generated. The trustpoint's server certificate is set
to use whatever key pair was specified for the trustpoint at the time the crypto pki
enroll command is issued.
The default key pair is "server-default". The default bit length is 2048 bits.
Example To configure trustpoint "example" to use the key pair "example-server-key" with a
bit length of 2048, use the following commands:
awplus>
awplus#
awplus(config)#
awplus(ca-trustpoint)#
Related crypto key generate rsa
Commands
C613-50103-01 REV A
)
Parameter Description
<keylabel>
The key to be used with the server certificate for this trustpoint.
The name must start with an alphanumeric character, and may
only contain alphanumeric characters, underscores, dashes, or
periods. The maximum length of the name is 63 characters.
<1024-4096> The bit length for the key, to be used if the key is implicitly
generated during server enrollment.
enable
configure terminal
crypto pki trustpoint example
Command Reference for x310 Series
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
rsakeypair example-server-key 2048
1832