3Com 3CRWX120695A Installation And Basic Configuration Manual page 54

54 C 3: C
HAPTER ONFIGURING A
WX S B
WITCH FOR
These commands copy the PKCS #12 object file from a TFTP server to the
WX switch, configure a one-time password, and install the PKCS #12
object file. The password allows the public-private key pair and the
certificate to be installed together from the same object file. MSS
removes the password after completing the crypto pkcs12 command.
Installing a Certificate for Network Users from a PKCS #7 Object
File
To generate a public-private key pair, and request and install a certificate
assigned by a CA in a PKCS #7 object file, use the following commands:
crypto generate key eap {1024 | 2048}
crypto generate request eap
crypto certificate eap PEM-formatted-certificate
After you submit the certificate request to a CA and receive a signed
certificate from the CA as a PKCS #7 object file, install the certificate into
the WX switch's certificate and key store:
1 Open the PKCS #7 object file with an ASCII text editor (such as Notepad).
2 Type the crypto certificate eap command at the WX switch's command
prompt.
3 After the prompt, paste the PKCS #7 object file into the CLI. For example:
WX1200# crypto certificate eap
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIGDDCCBbagAwIBAgIKFrJ2aAAAAA
AAnDANBgkqhkiG9w0BAQUFADCBmzErMCkG
CSqGSIb3DQEJARYcYWRtaW5pc3RyYX
RvckB0cmFwZXplc3FhLmNvbTELMAkGA1UE
...
bDQNTaS4W0ytUGuJm1RjyA==
-----END CERTIFICATE-----
You must paste the entire block, from the beginning:
-----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----
recognize the block only through the beginning and ending delimiters.
S
ASIC ERVICE
to the end:
. The certificate server and MSS