3Com 3CRWX120695A, Installation And Basic Configuration Manual

Page: 51 / 108

Enabling Secure Communication for 3WXM or Web Manager 51
EXRlY2hwdWJzQHRycHouY29tMIGfMA0GCSq
GSIb3DQEBAQUAA4GNADCBiQKBgQC4
...
G2As84QYMwe9RJAjfbYM5bdWRUFiLzvK7BJgqBsCZz4DP00=
-----END CERTIFICATE REQUEST-----
The common name is required. The other fields are optional. Use a
common name that uniquely identifies the WX switch. Use a fully
qualified name if such names are supported on your network.
After you submit the certificate request to a CA and receive a signed
certificate from the CA as a PKCS #7 object file, install the certificate into
the WX switch’s certificate and key store:
1 Open the PKCS #7 object file with an ASCII text editor (such as Notepad)
or a browser.
2 Type the crypto certificate admin command at the WX switch’s prompt.
3 After the prompt, copy and paste the PKCS #7 object file into the CLI. For
example:
WX1200# crypto certificate admin
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIGDDCCBbagAwIBAgIKFrJ2aAAAAAAAn
DANBgkqhkiG9w0BAQUFADCBmzErMCkG
CSqGSIb3DQEJARYcYWRtaW5pc3RyYXRvck
B0cmFwZXplc3FhLmNvbTELMAkGA1UE
...
bDQNTaS4W0ytUGuJm1RjyA==
-----END CERTIFICATE-----
You must paste the entire block, from the beginning:
-----BEGIN CERTIFICATE REQUEST-----
to the end:
-----END CERTIFICATE REQUEST-----
.
The certificate server and MSS
recognize the block only through the beginning and ending delimiters.
Installing a Certificate Authority’s Certificate
In addition to installing the WX switch certificate issued by the CA, you
also need to install the CA’s own certificate into the WX switch’s
certificate and key store. The CA certificate allows 3WXM or Web
Manager to verify that the WX switch’s certificate is valid. You need to
install the CA’s certificate whether you installed the switch certificate
from a PKCS #7 object file or a PKCS #12 object file.