ZyXEL Communications 4.04 Network Card User Manual


 
Chapter 8 Certificates Commands
ZyWALL (ZyNOS) CLI Reference Guide
59
This example displays the certificate that the ZyWALL is using as the default self-signed
certificate. Then it has the ZyWALL use the self signed certificate named “test” as the default
self-signed certificate.
This example exports the self signed certificate named “test”. After the certificate displays on
the screen, copy and paste it into a text editor (like Notepad) and save it as a .crt or .cer file.
This example imports a VeriSign certificate as a trusted CA. The CA certificate has to be
PEM-encoded. Refer to Section 8.2.1 on page 59 for how to save a certificate in PEM-encoded
format.
8.2.1 Saving Certificates as PEM-encoded Format
Do the following to save a certificate in PEM-encoded format.
ras> certificates my_cert def_self_signed
The default self-signed certificate: auto_generated_self_signed_cert
ras> certificates my_cert def_self_signed test
Would you like to make "test" as the default self-signed certificate? (y/n):y
ras> certificates my_cert def_self_signed
The default self-signed certificate: test
ras> certificates my_cert export test
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
ras> certificates ca_trusted import VeriSign
Please paste the PEM-encoded certificate onto the screen.
Press Ctrl+D when finished or Ctrl+C to cancel.
Note: 9600 bps console port speed guarantees minimum transmission error
rate.
-----END CERTIFICATE-----rTJXwT4OPjr0l91X817/OWOgHz8UA==ZHuO3ABc