crypto certificate 395
To use this command, you must already have obtained a copy of the
certificate authority’s certificate as a PKCS #7 object file. Then do the
following:
1 Open the PKCS #7 object file with an ASCII text editor such as Notepad
or vi.
2 Enter the crypto ca-certificate command on the CLI command line.
3 When MSS prompts you for the PEM-formatted certificate, paste the
PKCS #7 object file onto the command line.
Examples — The following command adds the certificate authority’s
certificate to WX certificate and key storage:
WX4400# crypto ca-certificate admin
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIDwDCCA2qgAwIBAgIQL2jvuu4PO5FAQCyewU3ojANBgkqhkiG9wOBAQUFADCB
mzerMClaweVQQTTooewi\wpoer0QWNFNkj90044mbdrl1277SWQ8G7DiwYUtrqoQplKJvxz
.....
Lm8wmVYxP56M;CUAm908C2foYgOY40=
-----END CERTIFICATE-----
See Also
display crypto ca-certificate on page 405
crypto certificate Installs one of the WX switch’s PKCS #7 certificates into the certificate
and key storage area on the WX switch. The certificate, which is issued
and signed by a certificate authority, authenticates the WX switch either
to 3WXM or Web Manager, or to 802.1X supplicants (clients).
Syntax —
crypto certificate {admin | eap | webaaa }
PEM-formatted certificate
admin — Stores the certificate authority’s administrative certificate,
which authenticates the WX switch to 3WXM or Web Manager.
eap — Stores the certificate authority’s Extensible Authentication
Protocol (EAP) certificate, which authenticates the WX switch to
802.1X supplicants (clients).
webaaa — Stores the certificate authority’s WebAAA certificate, which
authenticates the WX to clients who use WebAAA.