422
C
HAPTER
20: M
ANAGING
K
EYS
AND
C
ERTIFICATES
Some key lengths apply only to specific key types. For example,
128
applies only
to
domain
keys
.
SSH requires an SSH authentication key, but you can allow MSS to
generate it automatically. The first time an SSH client attempts to access
the SSH server on a WX switch, the switch automatically generates a
1024-byte SSH key. If you want to use a 2048-byte key instead, use the
crypto generate key ssh 2048
command to generate one.
After you generate or install a certificate (described in the following
sections), do not create the key pair again. If you do, the certificate might
not work with the new key, in which case you will need to regenerate or
reinstall the certificate.
Generating
Self-Signed
Certificates
After creating a public-private key pair, you can generate a self-signed
certificate. To generate a self-signed certificate, use the following
command:
crypto generate self-signed
{
admin
|
eap
|
web
}
When you type the command, the CLI prompts you to enter information
to identify the certificate. For example:
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
#
crypto generate self-signed admin
Country Name:
US
State Name:
CA
Locality Name:
San Jose campus
Organizational Name:
mycorp
Organizational Unit:
eng
Common Name:
WX1
Email Address:
Unstructured Name:
WX in wiring closet 120
success: self-signed cert for admin generated
You
must
include a common name (string) when you generate a
self-signed certificate. The other information is optional. Use a fully
qualified name if such names are supported on your network. The
certificate appears after you enter this information.
Summary of Contents for 3CRWX120695A
Page 138: ...138 CHAPTER 6 CONFIGURING AND MANAGING IP INTERFACES AND SERVICES ...
Page 272: ...272 CHAPTER 11 CONFIGURING RF LOAD BALANCING FOR MAPS ...
Page 310: ...310 CHAPTER 13 CONFIGURING USER ENCRYPTION ...
Page 322: ...322 CHAPTER 14 CONFIGURING RF AUTO TUNING ...
Page 350: ...350 CHAPTER 16 CONFIGURING QUALITY OF SERVICE ...
Page 368: ...368 CHAPTER 17 CONFIGURING AND MANAGING SPANNING TREE PROTOCOL ...
Page 412: ...412 CHAPTER 19 CONFIGURING AND MANAGING SECURITY ACLS ...
Page 518: ...518 CHAPTER 21 CONFIGURING AAA FOR NETWORK USERS ...
Page 530: ...530 CHAPTER 22 CONFIGURING COMMUNICATION WITH RADIUS ...
Page 542: ...542 CHAPTER 23 MANAGING 802 1X ON THE WX SWITCH ...
Page 598: ...598 CHAPTER 26 ROGUE DETECTION AND COUNTERMEASURES ...
Page 706: ...706 GLOSSARY ...