Nortel 2350 Installation And Basic Configuration Manual page 96

96 Configuring a 2370, 2360, or 2380 Switch for Basic Service
After you submit the certificate request to a CA and receive a signed certificate from the CA as a PKCS #7
object file, install the certificate into the WSS's certificate and key store:
1
Open the PKCS #7 object file with an ASCII text editor (such as Notepad).
2
Type the crypto certificate eap command at the WSS's command prompt.
3
After the prompt, paste the PKCS #7 object file into the CLI. For example:
2370# crypto certificate eap
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIGDDCCBbagAwIBAgIKFrJ2aAAAAAAAnDANBgkqhkiG9w0BAQUFADCBm
zErMCkG
CSqGSIb3DQEJARYcYWRtaW5pc3RyYXRvckB0cmFwZXplc3FhLmNvbTELM
AkGA1UE
...
bDQNTaS4W0ytUGuJm1RjyA==
-----END CERTIFICATE-----
Note.
-----BEGIN CERTIFICATE REQUEST----- to the end:
-----END CERTIFICATE REQUEST-----. The certificate server and WSS Software
recognize the block only through the beginning and ending delimiters.
Installing a Certificate Authority's Certificate for Network Users
In addition to installing the WSS certificate issued by the CA, you also need to install the CA's own certificate
into the WSS's certificate and key store. The CA certificate allows users to verify that the WSS's certificate is
valid. You need to install the CA's certificate whether you installed the switch certificate from a PKCS #7
object file or a PKCS #12 object file.
To install a CA's certificate:
1
Request a copy of the CA certificate as a PKCS #7 object file from the CA, then open the file
with an ASCII text editor (such as Notepad).
2
Type the crypto ca-certificate eap command.
3
After the prompt, paste the PKCS #7 object file into the CLI. For example:
2370# crypto ca-certificate eap
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIDwDCCA2qgAwIBAgIQL2jvuu4P05FAQICyewU3ojANBgkqhkiG9w0BA
QUFADCB
mzErMCkGCSqGSIb3DQEJARYcYWRtaW5pc3RyYXRvckB0cmFwZXplc3FhL
mNvbTEL
...
RGpOeQ==
320656-A
You must paste the entire block, from the beginning: