Installing A Certificate - Nortel 2350 Installation And Basic Configuration Manual

90 Configuring a 2370, 2360, or 2380 Switch for Basic Service

Installing a Certificate

To manage a WSS, WLAN Management Software or a Web browser using Web View must be able to authen-
ticate the switch and establish an encrypted session to it. This requires the switch to have a server certificate.
Use one of the following methods to enable secure communication between WLAN Management Software or
Web View and a WSS:
• Generate a self-signed certificate on the switch.
(See "Generating a Self-Signed Certificate" on page
• Alternatively, request a certificate for the WSS from a CA and install the certificate into the switch along
with the CA's own certificate.
(See "Installing a Certificate Assigned by a Certificate Authority" on page 91
Certificate Authority's Certificate" on page
Generating a Self-Signed Certificate
As an alternative to using a certificate assigned by a CA, you can generate a self-signed certificate on the
WSS. To use a self-signed certificate generated by the WSS, use the following commands:
crypto generate key admin {512 | 1024 | 2048}
crypto generate self-signed admin
The following commands generate a public-private key pair and a self-signed certificate:
2370# crypto generate key admin 1024
key pair generated
2370# crypto generate self-signed admin
Country Name:
State Name:
Locality Name:
Organizational Name:
Organizational Unit:
Common Name: mx1@example.com
Email Address:
Unstructured Name:
Self-signed cert for admin is
-----BEGIN CERTIFICATE-----
MIICUzCCAbygAwIBAgICA+cwDQYJKoZIhvcNAQEEBQAwNjELMAkGA1UEBhMCVVMx
CzAJBgNVBAgTAkNBMRowGAYDVQQDFBF0ZWNocHVic0B0cnB6LmNvbTAeFw0wMzA0
...
Lm8wmVYLxP56MpCUAm9O8C2foYgOY40=
-----END CERTIFICATE-----
The common name is required. The other fields are optional. Use a common name that uniquely identifies the
WSS. Use a fully qualified name if such names are supported on your network.
320656-A
90.)
93.)
and "Installing a