Generating A Public/Private Key; Generating And Storing A Csr - HP AE370A - Brocade 4Gb SAN Switch 4/12 Administrator's Manual

Each CA (for example, Verisign or GeoTrust) has slightly different requirements; for example, some
generate certificates based on IP address, while others require an FQDN, and most require a 1024-bit
public/private key while some might accept a 2048-bit key. Consider your fabric configuration, check CA
Web sites for requirements, and gather all the information that the CA requires.

Generating a public/private key

Perform this procedure on each switch:
1. Connect to the switch and log in as admin.
2. Enter this command to generate a public/private key pair:
switch:admin> seccertutil genkey
The system reports that this process will disable secure protocols, delete any existing CSR, and delete
any existing certificates.
3. Respond to the prompts to continue and select the key size:
Continue (yes, y, no, n): [no] y
Select key size [1024 or 2048]: 1024
Generating new rsa public/private key pair
Done.
Because CA support for the 2048-bit key size is limited, you should select 1024 in most cases.

Generating and storing a CSR

After generating a public/private key (see
procedure on each switch:
1. Connect to the switch and log in as admin.
2. Enter this command:
switch:admin> seccertutil gencsr
3. Enter the requested information:
Country Name (2 letter code, eg, US):US
State or Province Name (full name, eg, California):California
Locality Name (eg, city name):San Jose
Organization Name (eg, company name):Brocade
Organizational Unit Name (eg, department name):Eng
Common Name (Fully qualified Domain Name, or IP address): 192.1.2.3
Generating CSR, file name is: 192.1.2.3.csr
Done.
Your CA might require specific codes for Country, State or Province, Locality, Organization, and
Organizational Unit names. Make sure that your spelling is correct and matches the CA requirements. If
the CA requires that the Common Name be specified as an FQDN, make sure that the fully qualified
domain name is set on the domain name server.
4. Enter this command to store the CSR:
switch:admin> seccertutil export
5. Enter the requested information:
Select protocol [ftp or scp]: ftp
Enter IP address: 192.1.2.3
Enter remote Directory:
Enter Login Name:
Enter Password:
Success: exported CSR.
"Generating a public/private
path_to_remote_Directory
your account
your password
key" on page 88), perform this
Fabric OS 5.2.x administrator guide 89