Installing Ca-Signed Certificates From Pkcs #12 Object Files - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Installing CA-Signed Certificates from PKCS #12 Object Files

This scenario shows how to use PKCS #12 object files to install public-private key pairs, CA-signed
certificates, and CA certifies for administrative access, 802.1X (EAP) access, and WebAAA access.
1. Set time and date parameters, if not already set. (See "Configuring and Managing Time
Parameters".)
2. Obtain PKCS #12 object files from a certificate authority.
3. Copy the PKCS #12 object files to nonvolatile storage on the DWS-1008. Use the following
command:
copy tftp://filename local-filename
For example, to copy PKCS #12 files named 2048admn.p12, 20481x.p12, and 2048web.
p12 from the TFTP server at the address 192.168.253.1, type the following commands:
DWS-1008# copy tftp://192.168.253.1/2048admn.p12 2048admn.p12
success: received 637 bytes in 0.253 seconds [ 2517 bytes/sec]
DWS-1008# copy tftp://192.168.253.1/20481x.p12 20481x.p12
success: received 637 bytes in 0.253 seconds [ 2517 bytes/sec]
DWS-1008# copy tftp://192.168.253.1/2048web.p12 2048web.p12
success: received 637 bytes in 0.253 seconds [ 2517 bytes/sec]
4. Enter the one-time passwords (OTPs) for the PKCS #12 object files. The OTP protects the
PKCS #12 file. To enter a one-time password, use the following command:
crypto otp {admin | eap | web} one-time-password
For example:
DWS-1008# crypto otp admin SeC%#6@o%c
OTP set
DWS-1008# crypto otp eap SeC%#6@o%d
OTP set
DWS-1008# crypto otp web SeC%#6@o%e
OTP set
D-Link DWS-1008 User Manual 8