Brocade Communications Systems ServerIron ADX 12.4.00a Security Manual page 165

After transferring the file, it can be used both as a key and a certificate. To add the certificate file
and keys to the profile, use the following commands:
The show ssl cert command can be used to display a pkcs file. The show ssl key command does not
display a pkcs file, but it does contain a keypair.
Creating a Master Password for export of SSL keys
You can create a master password that grants permission to export all SSL keys on a ServerIron
ADX using SCP copy. This password is used with the "scp <key-pair-file-name>
<user>@<SI_IP_Addr>: sslkeypair:<filename-on-SI>:<password>: <format>" command. If a master
password is not configured, a separate password associated with each key must be used.
To define a master password for the export of SSL keys, use the following command.
ServerIronADX# ssl set export-master-pswd exportpw
Syntax: ssl set export-master-pswd <password>
The <password> variable specifies the master password for export of SSL keys. It can be from 1 to
24 characters in length.
To disable a master password for export of SSL keys, use the following command.
ServerIronADX# ssl clear export-master-pswd exportpw
Syntax: ssl clear export-master-pswd <password>
The <password> variable specifies the master password for export of SSL keys that you want to
remove.
Use the following command to display whether a master password is in effect.
ServerIronADX# show ssl key *
master-password enable
ssl
1
2
3
4
5
Syntax: show ssl key *
Deleting certificate and key files
You can use the following commands to delete a specified certificate or key file as shown.
ServerIronADX# ssl clear certfile <certfile-name>
Syntax: ssl clear certfile <certfile-name>
The <certfile-name> variable specifies the certificate that you want to delete.
ServerIronADX# ssl clear keyfile <keyfile-name>
Syntax: ssl clear certfile <keyfile-name>
The <keyfile-name> variable specifies the key that you want to delete.
ServerIron ADX Security Guide
53-1002440-03
ServerIronADX(config-ssl-profile-mysslprofile)# keypair-file mypkcsfile
ServerIronADX(config-ssl-profile-mysslprofile)# certificate-file mypkcsfile
key files:
: key-test
: key1
: keyz
: keyc
: key7
Configuring SSL on a ServerIron ADX
6
151