Installing A Ca's Own Certificate; Displaying Certificate And Key Information - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

If you installed a CA-signed certificate from a PKCS #7 file, you must also install the PKCS #7 certificate
of that CA. (If you used the PKCS #12 method, the CA's certificate is usually included with the key pair
and server certificate.)
To install a CA's certificate, use the following command:
crypto ca-certificate {admin | eap | web} PEM-formatted-certificate
When prompted, paste the certificate under the prompt. For example:
DWS-1008# crypto ca-certificate admin
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIDwDCCA2qgAwIBAgIQL2jvuu4PO5FAQCyewU3ojANBgkqhkiG9wOBAQUFADCB
mzerMClaweVQQTTooewi\wpoer0QWNFNkj90044mbdrl1277SWQ8G7DiwYUtrqoQplKJ
.....
Lm8wmVYxP56M;CUAm908C2foYgOY40=
-----END CERTIFICATE-----
Displaying Certificate and Key
To display information about certificates installed on a switch, use the following commands:
show crypto ca-certificate {admin | eap | web}
show crypto certificate {admin | eap | web}
For example, to display information about an administrative certificate, type the following command:
DWS-1008# show crypto certificate admin
Certificate:
Version: 3
Serial Number: 999 (0x3e7)
Subject: C=US, ST=CA, L=PLEAS, O=DLINK, OU=SQA, CN=BOBADMIN/
emailAddress=BOBADMIN, unstructuredName=BOB
Signature Algorithm: md5WithRSAEncryption
Issuer: C=US, ST=CA, L=PLEAS, O=TRPZ, OU=SQA, CN=BOBADMIN/
emailAddress=BOBADMIN, unstructuredName=BOB
Validity:
Not Before: Oct 19 01:57:13 2004 GMT
Not After : Oct 19 01:57:13 2005 GMT
The last two rows of the display indicate the period for which the certificate is valid. Make sure the date
and time set on the switch are within the date and time range of the certificate.
D-Link DWS-1008 User Manual

Installing a CA's Own Certificate

Information