Nortel Networks 450 series Switch User Manual


 
Managing private keys and certificates 303
/cfg/cert <cert ID>
followed by:
name <name>
Names or renames the certificate, as a
mnemonic aid.
cert
Lets you paste the contents of a certificate
file from a text editor. For more information,
see “Adding a certificate to the Nortel SNAS
(page 310).
key
Lets you paste the contents of a key file from a
text editor. For more information, see “Adding
a private key to the Nortel SNAS (page 312).
revoke
Accesses the Revocation menu.
Not supported in Nortel Secure Network
Access Switch Software Release 1.6.1.
gensigned server|client
Generates a certificate that is signed using
the private key associated with the currently
selected certificate.
You are prompted to provide the following
parameters: <country> <state or province>
<locality> <organization> <organizational unit>
<common name> <e-mail address> <validity
period> <key size> <CA cert true|false> <serial
number> <pass phrase>
servergenerates a signed server certificate
provided with key use options that are
appropriate for server usage. Set the CA
cert value to true if you plan to issue your
own chained server certificates, generating
them from the currently generated server
certificate.The CA cert value you specify
when generating a certificate translates
into the X509v3 Basic Constraints property
in the generated certificate. To view the
properties of a certificate available on the
Nortel SNAS, use the /cfg/cert #/show
command.
client—not supported in Nortel Secure
Network Access Switch Software Release
1.6.1.
request
Generates a certificate signing request.
For more information, see “Generating and
submitting a CSR” (page 305).
Nortel Secure Network Access Switch
Using the Command Line Interface
NN47230-100 03.01 Standard
28 July 2008
Copyright © 2007, 2008 Nortel Networks
.