Configuring Certificates On The Mds Switch - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Example Configurations
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
•

Configuring Certificates on the MDS Switch

To configure certificates on an MDS switch, follow these steps:
Configure the switch FQDN.
Step 1
switch# config t
Enter configuration commands, one per line.
switch(config)# switchname Vegas-1
Vegas-1(config)#
Configure the DNS domain name for the switch.
Step 2
Vegas-1(config)# ip domain-name cisco.com
Vegas-1(config)#
Step 3 Create a trust point.
Vegas-1(config)# crypto ca trustpoint myCA
Vegas-1(config-trustpoint)# exit
Vegas-1(config)# do show crypto ca trustpoints
trustpoint: myCA; key:
revokation methods:
Vegas-1(config)#
Create an RSA key-pair for the switch.
Step 4
Vegas-1(config)# crypto key generate rsa label myKey exportable modulus 1024
Vegas-1(config)# do show crypto key mypubkey rsa
key label: myKey
key size: 1024
exportable: yes
Vegas-1(config)#
Step 5 Associate the RSA key-pair to the trust point.
Vegas-1(config)# crypto ca trustpoint myCA
Vegas-1(config-trustpoint)# rsakeypair myKey
Vegas-1(config-trustpoint)# exit
Vegas-1(config)# do show crypto ca trustpoints
trustpoint: myCA; key: myKey
revokation methods:
Vegas-1(config)#
Download the CA certificate from the Microsoft Certificate Service web interface (see the
Step 6
"Downloading a CA Certificate" section on page
Step 7 Authenticate the CA that you want to enroll to the trust point.
Vegas-1(config)# crypto ca authenticate myCA
input (cut & paste) CA certificate (chain) in PEM format;
end the input with a line containing only END OF INPUT :
-----BEGIN CERTIFICATE-----
MIIC4jCCAoygAwIBAgIQBWDSiay0GZRPSRIljK0ZejANBgkqhkiG9w0BAQUFADCB
kDEgMB4GCSqGSIb3DQEJARYRYW1hbmRrZUBjaXNjby5jb20xCzAJBgNVBAYTAklO
MRIwEAYDVQQIEwlLYXJuYXRha2ExEjAQBgNVBAcTCUJhbmdhbG9yZTEOMAwGA1UE
ChMFQ2lzY28xEzARBgNVBAsTCm5ldHN0b3JhZ2UxEjAQBgNVBAMTCUFwYXJuYSBD
QTAeFw0wNTA1MDMyMjQ2MzdaFw0wNzA1MDMyMjU1MTdaMIGQMSAwHgYJKoZIhvcN
Cisco MDS 9000 Family CLI Configuration Guide
34-16
Downloading the CRL, page 34-33
Importing the CRL, page 34-35
crl
crl
Chapter 34 Configuring Certificate Authorities and Digital Certificates
End with CNTL/Z.
34-19)
OL-16184-01, Cisco MDS SAN-OS Release 3.x