Cisco MDS 9000 Series Configuration Manual page 146

Exporting and Importing Identity Information from PKCS12 Format
Note Only the bootflash:filename format local syntax is supported when specifying the export and import URL.
To export a certificate and key-pair to a PKCS#12-formatted file, follow these steps:
Procedure
Step 1 switch# configure terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# crypto ca export admin-ca pkcs12 bootflash:adminid.p12 nbv123
Exports the identity certificate and associated key-pair and CA certificates for trust point admin-ca to the file
bootflash:adminid.p12 in PKCS#12 format, protected using password nbv123.
Step 3
switch(config)# exit
switch#
Returns to EXEC mode.
Step 4 switch# copy bootflash:adminid.p12 tftp:adminid.p12
Copies the PKCS#12 format file to a TFTP server.
Exporting and Importing Identity Information from PKCS12 Format
To import a certificate and key-pair from a PKCS#12-formatted file, follow these steps:
Procedure
Step 1
switch# copy tftp:adminid.p12 bootflash:adminid.p12
Copies the PKCS#12 format file from a TFTP server.
Step 2 switch# configure terminal
switch(config)#
Enters configuration mode.
Step 3
switch(config)# crypto ca import admin-ca pkcs12 bootflash:adminid.p12 nbv123
Imports the identity certificate and associated key-pair and CA certificates for trust point admin-ca from the
file bootflash:adminid.p12 in PKCS#12 format, protected using password nbv123.
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
128
Configuring Certificate Authorities and Digital Certificates