Seccertutil - Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Command Reference Manual

2

secCertUtil

secCertUtil
Manages third-party PKI-based certificates in the switch.
Synopsis seccertutil
Description Use this command to manage third-party certificates in the switch. This command also imports or
exports Certificate Signing Requests from or to remote host using IPV6 addresses and IPV4
addresses.
This command can be used to do the following:
•
•
•
•
•
•
•
•
Operands The following operands are supported:
delcsr
delete file name
export
genkey
delkey
gencsr
import [-config cacert] | [-config swcert [-enable https]]
544
Generate a public/private key pair.
Generate a certificate signing request (CSR).
Delete a CSR.
List the certificates present in the switch.
Display the contents of a certificate/CSR.
Delete a specific certificate.
Configure SSL certificate file name.
Enable secure protocols.
Delete CSR
Delete certificate
Export CSR
Generates a public/private key pair. This is the first step for setting up
third-party certificates. The key length can be either 1,024 or 2,048 bits long.
The greater the length of the key, the more secure is the connection; however,
the performance goes down. The keys are generated only after deleting
existing CSR and all other certificates.
Delete public/private key pair.
Generates a new CSR for the switch. This is second step for setting up
third-party certificates in the switch. To generate a CSR, the admin must
answer a series of questions prompted by this option. Once all questions are
answered, a CSR is generated and placed in a file named ip_address.csr,
where the ip_address is the IP address of the switch.
Import a certificate. Use this command to download a certificate issued by a
CA after sending the CSR to the CA. Set imported certificate with the -config
option.
-config swcert Configure SSL certificate filename (optional)
-config cacert Configure CA certificate filename (optional)
-enable https Enable secure https (optional)
Fabric OS Command Reference
53-1000599-01