Filter
Top Products
3-12
Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference
OL-7029-01
Chapter 3 Commands Specific to the Content Switching Module with SSL
crypto ca export pkcs12
crypto ca export pkcs12
To export a PKCS12 file from the Content Switching Module with SSL, use the crypto ca export
pkcs12 command.
crypto ca export trustpoint_label pkcs12 file_system [pkcs12_filename] pass_phrase
Syntax Description
Defaults This command has no default settings.
Command Modes Global configuration
Command History
Usage Guidelines Imported key pairs cannot be exported.
If you are using SSH, we recommend using SCP (secure file transfer) when exporting a PKCS12 file.
SCP authenticates the host and encrypts the transfer session.
If you do not specify pkcs12_filename, you will be prompted to accept the default filename (the default
filename is the trustpoint_label) or enter the filename. For the ftp: or tftp: value, include the full path
in the pkcs12_filename.
You will receive an error if you enter the pass phrase incorrectly.
If there is more than one level of CA, the root CA, and all the subordinate CA certificates are exported
in the PKCS12 file.
Examples This example shows how to export a PKCS12 file using SCP:
ssl-proxy(config)# crypto ca export TP1 pkcs12 scp: sky is blue
Address or name of remote host []? 10.1.1.1
Destination username [ssl-proxy]? admin-1
Destination filename [TP1]? TP1.p12
Password:
trustpoint_label Specifies the trustpoint label.
file_system Specifies the file system. Valid values are scp:, ftp:, nvram:, rcp:, and
tftp:
pkcs12_filename (Optional) Specifies the name of the PKCS12 file to import.
pass_phrase Specifies the pass phrase of the PKCS12 file.
Release Modification
Cisco IOS Release
12.1(13)E and
SSL Services Module
Release 1.1(1)
Support for this command was introduced on the Catalyst 6500 series
switches.
CSM-S release 1.1(1) This command was introduced.