Brocade Communications Systems 53-1001763-02 Administrator's Manual page 192

7
Authentication policy for fabric elements
Import CA for FCAP
Once you receive the files back from the Certificate Authority, you will need to install or import them
onto the local and remote switches.
1. Log in to the switch using an account assigned to the admin role.
2. Enter the secCertUtil import –fcapswcert command and verify the CA certificates are
Importing the FCAP switch certificate
ATTENTION
The CA certificates must be installed prior to installing the switch certificate.
1. Log in to the switch using an account assigned to the admin role.
2. Enter the secCertUtil import –fcapcacert command.
Updating the switch database for FCAP authentication
1. Log in to the switch using an account assigned to the admin role.
2. Enter the secAuthCertificate –-set - wwn <WWN> -usercert thirdparty command to update the
Starting FCAP authentication
1. Log in to the switch using an account assigned to the admin role.
2. Enter the authUtil --authinit command to start the authentication using the newly imported
3. Enter the authUtil --policy -sw command and select active or on, the default is passive. This
152
jdoe@10.1.2.3's password: <hidden text>
Success: exported FCAP CA certificate
consistent on both local and remote switches.
switch:admin> seccertutil import -fcapcacert
Select protocol [ftp or scp]: scp
Enter IP address: 10.1.2.3
Enter remote directory: /myHome/jdoe/OPENSSL
Enter certificate name (must have a ".pem"
Enter Login Name: jdoe
jdoe@10.1.2.3's password: <hidden text>
Success: imported certificate [CACert.pem].
switch:admin> seccertutil import -fcapswcert
Select protocol [ftp or scp]: scp
Enter IP address: 10.1.2.3
Enter remote directory: /myHome/jdoe/OPENSSL
Enter certificate name (must have ".crt" or ".cer" ".pem" or ".psk"
suffix):01.pem
Enter Login Name: jdoe
jdoe@10.1.2.3's password: <hidden text>
Success: imported certificate [01.pem].
switch database for peer switches.
certificates.
makes the changes permanent and forces the switch to request authentication.
suffix):CACert.pem
Fabric OS Administrator's Guide
53-1001763-02