Email Address - Nortel 2350 Installation And Basic Configuration Manual

92 Configuring a 2370, 2360, or 2380 Switch for Basic Service
These commands copy the PKCS #12 object file from a TFTP server to the WSS, configure a one-time password, and
install the PKCS #12 object file. The password allows the public-private key pair and the certificate to be installed
together from the same object file. WSS Software removes the password after completing the crypto pkcs12 command.
Here is an example:
2370# copy tftp://10.10.10.10/p12file
2370# crypto otp admin temppwd
2370# crypto pkcs12 admin p12file
Installing a Certificate from a PKCS #7 Object File
To generate a public-private key pair, and request and install a certificate assigned by a CA in a PKCS #7 object file, use
the following commands:
crypto generate key admin {512 | 1024 | 2048}
crypto generate request admin
crypto certificate admin PEM-formatted-certificate
The following commands generate a key pair and a certificate request:
2370# crypto generate key admin 1024
key pair generated
2370# crypto generate request admin
Country Name:
State Name:
Locality Name:
Organizational Name:
Organizational Unit:
Common Name: mx1@example.com

Email Address:

Unstructured Name:
CSR for admin is
-----BEGIN CERTIFICATE REQUEST-----
MIIBdTCB3wIBADA2MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExGjAYBgNVBAMU
EXRlY2hwdWJzQHRycHouY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4
...
2L8Q9tk+G2As84QYMwe9RJAjfbYM5bdWRUFiLzvK7BJgqBsCZz4DP00=
-----END CERTIFICATE REQUEST-----
The common name is required. The other fields are optional. Use a common name that uniquely identifies the WSS. Use
a fully qualified name if such names are supported on your network.
After you submit the certificate request to a CA and receive a signed certificate from the CA as a PKCS #7 object file,
install the certificate into the WSS's certificate and key store:
1
Open the PKCS #7 object file with an ASCII text editor (such as Notepad) or a browser.
2
Type the crypto certificate admin command at the WSS's prompt.
320656-A