Key And Certificate Configuration Scenarios; Creating Self-Signed Certificates - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Key and Certificate Configuration
The first scenario shows how to generate self-signed certificates. The second scenario shows how to
install CA-signed certificates using PKCS #12 object files, and the third scenario shows how to install
CA-signed certificates using CSRs (PKCS #10 object files) and PKCS #7 object files.
To manage the security of the switch for administrative access by Web View, and the security of
communication with 802.1X users and WebAAA users, create Admin, EAP, and WebAAA public-private
key pairs and self-signed certificates. Follow these steps:
1. Set time and date parameters, if not already set.
2. Generate public-private key pairs:
DWS-1008# crypto generate key admin 1024
key pair generated
DWS-1008# crypto generate key eap 1024
key pair generated
DWS-1008# crypto generate key web 1024
key pair generated
3. Generate self-signed certificates:
DWS-1008# crypto generate self-signed admin
Country Name: US
State Name: CA
Locality Name: San Francisco
Organizational Name: example
Organizational Unit: IT
Common Name: DL 6
Email Address: admin@example.com
Unstructured Name: wiring closet 4
success: self-signed cert for admin generated
DWS-1008# crypto generate self-signed eap
Country Name: US
State Name: CA
Locality Name: San Francisco
Organizational Name: example
Organizational Unit: IT
Common Name: DL 6
Email Address: admin@example.com
Unstructured Name: wiring closet 4
Self-signed cert for eap is
success: self-signed cert for eap generated
D-Link DWS-1008 User Manual
Scenarios

Creating Self-Signed Certificates