D-Link dws-1008 Switch User Manual


 
D-Link DWS-1008 CLI Manual 214
Cryptography Commands
A digital certificate is a form of electronic identification for computers. The switch requires digital
certificates to authenticate its communications to Web View, to WebAAA clients, and to Extensible
Authentication Protocol (EAP) clients for which the switch performs all EAP processing. Certificates
can be generated on the switch or obtained from a certificate authority (CA). Keys contained within the
certificates allow the switch, its servers, and its wireless clients to exchange information secured by
encryption.
Note: If the switch does not already have certificates, MSS automatically generates the missing
ones the first time you boot using MSS Version 4.2 or later. You do not need to install certificates
unless you want to replace the ones automatically generated by MSS.
Note: Before installing a new certificate, verify with the show timedate and show timezone
commands that the switch is set to the correct date, time, and time zone. Otherwise, certificates
might not be installed correctly.
Encryption Keys crypto generate key on page 217
show crypto key domain on page 226
show crypto key ssh on page 226
PKCS#7 Certificates crypto generate request on page 218
crypto ca-certificate on page 215
show crypto ca-certificate on page 224
crypto certificate on page 216
show crypto certificate on page 225
PKCS#12 Certificate crypto otp on page 222
crypto pkcs12 on page 223
Self-Signed Certificate crypto generate self-signed on page 220