Crypto Ca Export - Cisco AJ732A - MDS 9134 Fabric Switch Command Reference Manual

crypto ca export

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
crypto ca export
To export the RSA key pair and the associated certificates (identity and CA) of a trust point within a
Public-Key Cryptography Standards (PKCS) #12 format file to a specified location, use the crypto ca
export command in configuration mode.
Syntax Description trustpoint-label
pkcs12 destination-file-url
pkcs12-password
Defaults
None.
Command Modes Configuration mode.
Command History Release
3.0(1)
Usage Guidelines
You can export the identity certificate along with the associated RSA key pair and CA certificate (or
certificate chain) to a PKCS #12 format file for backup purposes. You can later import the certificate and
RSA key pair to recover from a system crash on your switch.
Examples The following example shows how to export a certificate and key pair in PKCS #12 format:
switch# config terminal
switch(config)# crypto ca export admin-ca pkcs12 bootflash:adminid.p12 nbv123
Related Commands Command
crypto ca import
trustpoint-label
certificate
crypto ca import
trustpoint-label
pkcs12
crypto key generate
rsa
Cisco MDS 9000 Family Command Reference
4-130
crypto ca export trustpoint-label pkcs12 destination-file-url pkcs12-password
Modification
This command was introduced.
Description
Imports the identity certificate obtained from the CA to the trust point.
Imports the identity certificate and associated RSA key pair and CA
certificate (chain) to a trust point.
Generates an RSA key pair.
Specifies the name of the trust point. The maximum size is 64
characters.
Specifies a destination file in bootflash:filename format. The maximum
size is 512 characters.
Specifies the password to be used to protect the RSA private key inthe
exported file. The maximum size is 64 characters.
Chapter 4 C Commands
OL-18089-01, Cisco MDS NX-OS Release 4.x