C H A P T E R 5
Command
config policygroup
service key certificate
import
NOTE: When the
procedure is complete, you
can type info at the prompt
to verify the certificate's
transfer to the SA8220.
config policygroup
service key client-ca
NOTE: Client certificates
are actually loaded in the
browser. Certificates from
the CA that issued the client
certificates are loaded in
the SA8220.
Description
Imports an existing certificate. We recommend you copy the
certificate (a block of ASCII text) from a server's console window,
then paste it into the SA8220's console window when prompted.
To paste in a certificate, type the import command and press
<Enter>. The CLI prompts you to paste in the certificate. When
finished, type three periods ("...") on a separate line, then press
<Enter>.
config policygroup <policy-name> service
<service-name> key certificate import [<url>
user <username> password <password>
where:
•
policy-name is the name of a policy group
•
service-name is the name of a service
•
url is a valid URL identifying the certificate file to
download. (It must be in the form ftp://<host>/<path-
name> )
•
user is the username
•
password is the password
Displays, deletes, exports, or imports a client certificate.
config policygroup <policy-name> service
<service-name> key client-ca [delete | export |
import | info]
where:
•
policy-name is the name of a policy group
•
service-name is the name of a service
•
delete deletes a client certificate
•
export exports a client certificate
•
import imports a client certificate
•
info displays the client certificate information
SSL Commands (SA8200/SA8220 only)
187