Generating And Storing A Csr; Obtaining Certificates - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Generating and storing a CSR

After generating a public/private key (see
procedure on each switch:
1. Connect to the switch and log in as admin.
2. Enter this command:
switch:admin> seccertutil gencsr
3. Enter the requested information:
Country Name (2 letter code, eg, US):US
State or Province Name (full name, eg, California):California
Locality Name (eg, city name):San Jose
Organization Name (eg, company name):Brocade
Organizational Unit Name (eg, department name):Eng
Common Name (Fully qualified Domain Name, or IP address): 192.1.2.3
Generating CSR, file name is: 192.1.2.3.csr
Done.
Your CA might require specific codes for Country, State or Province, Locality, Organization, and
Organizational Unit names. Make sure that your spelling is correct and matches the CA requirements. If
the CA requires that the Common Name be specified as an FQDN, make sure that the fully qualified
domain name is set on the domain name server.
4. Enter this command to store the CSR:
switch:admin> seccertutil export
5. Enter the requested information:
Select protocol [ftp or scp]: ftp
Enter IP address: 192.1.2.3
Enter remote Directory:
Enter Login Name:
Enter Password:
Success: exported CSR.
If you are set up for secure file copy protocol, you can select it; otherwise, select ftp. Enter the IP address of
the switch on which you generated the CSR. Enter the remote Directory name of the FTP server to which the
CSR is to be sent. Enter your account name and password on the server.

Obtaining certificates

Check the instructions on the CA Web site; then, perform this procedure for each switch:
1. Generate and store the CSR as described in
2. Open a Web browser window on the management workstation and go to the CA Web site. Follow the
instructions to request a certificate. Locate the area in the request form into which you are to paste
the CSR.
3. Through a telnet window, connect to the switch and log in as admin.
4. Enter this command:
switch:admin> seccertutil showcsr
The contents of the CSR is displayed.
5. Locate the section that begins with "BEGIN CERTIFICATE REQUEST" and ends with "END CERTIFICATE
REQUEST".
6. Copy and paste this section (including the BEGIN and END lines) into the area provided in the request
form; then, follow the instructions to complete and send the request.
96 Configuring standard security features
"Generating a public/private
path_to_remote_Directory
your account
your password
"Generating a public/private
key" on page 95), perform this
key" on page 95.