Crypto Pki Export Pkcs12 - Cisco Catalyst 6500 Series Command Reference Manual

Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module

crypto pki export pkcs12

To export a PKCS12 file from the SSL Services Module, use the crypto pki export pkcs12 command.
Syntax Description trustpoint_label
file_system
pkcs12_filename
pass_phrase
Defaults
This command has no default settings.
Command Modes Global configuration
Command History Release
Cisco IOS Release
12.1(13)E and
SSL Services Module
Release 1.1(1)
SSL Services Module
Release 3.1(1)
Usage Guidelines
Imported key pairs cannot be exported.
If you are using SSH, we recommend using SCP (secure file transfer) when exporting a PKCS12 file.
SCP authenticates the host and encrypts the transfer session.
If you do not specify pkcs12_filename, you will be prompted to accept the default filename (the default
filename is the trustpoint_label) or enter the filename. For the ftp: or tftp: value, include the full path
in the pkcs12_filename.
You will receive an error if you enter the pass phrase incorrectly.
If there is more than one level of CA, the root CA and all the subordinate CA certificates are exported
in the PKCS12 file.
OL-9105-01
crypto pki export trustpoint_label pkcs12 file_system [pkcs12_filename] pass_phrase
Specifies the trustpoint label.
Specifies the file system. Valid values are scp:, ftp:, nvram:, rcp:, and tftp:
(Optional) Specifies the name of the PKCS12 file to import.
Specifies the pass phrase of the PKCS12 file.
Modification
Support for this command was introduced on the Catalyst 6500 series
switches.
The syntax for this command changed from crypto ca to crypto pki.
Catalyst 6500 Series Switch SSL Services Module Command Reference
crypto pki export pkcs12
2-11