Brocade Communications Systems 53-1001763-02, Administrator'S Manual

Page: 192 / 586

152 Fabric OS Administrator’s Guide
53-1001763-02
Authentication policy for fabric elements
7
jdoe@10.1.2.3's password: <hidden text>
Success: exported FCAP CA certificate
Import CA for FCAP
Once you receive the files back from the Certificate Authority, you will need to install or import them
onto the local and remote switches.
1. Log in to the switch using an account assigned to the admin role.
2. Enter the secCertUtil import –fcapswcert command and verify the CA certificates are
consistent on both local and remote switches.
switch:admin> seccertutil import -fcapcacert
Select protocol [ftp or scp]: scp
Enter IP address: 10.1.2.3
Enter remote directory: /myHome/jdoe/OPENSSL
Enter certificate name (must have a ".pem" suffix): CACert.pem
Enter Login Name: jdoe
jdoe@10.1.2.3's password: <hidden text>
Success: imported certificate [CACert.pem].
Importing the FCAP switch certificate
ATTENTION
The CA certificates must be installed prior to installing the switch certificate.
1. Log in to the switch using an account assigned to the admin role.
2. Enter the secCertUtil import –fcapcacert command.
switch:admin> seccertutil import -fcapswcert
Select protocol [ftp or scp]: scp
Enter IP address: 10.1.2.3
Enter remote directory: /myHome/jdoe/OPENSSL
Enter certificate name (must have ".crt" or ".cer" ".pem" or ".psk"
suffix):
01.pem
Enter Login Name: jdoe
jdoe@10.1.2.3's password: <hidden text>
Success: imported certificate [01.pem].
Updating the switch database for FCAP authentication
1. Log in to the switch using an account assigned to the admin role.
2. Enter the secAuthCertificate
–-
set - wwn <WWN> -usercert thirdparty command to update the
switch database for peer switches.
Starting FCAP authentication
1. Log in to the switch using an account assigned to the admin role.
2. Enter the authUtil
--
authinit command to start the authentication using the newly imported
certificates.
3. Enter the authUtil --policy -sw command and select active or on, the default is passive. This
makes the changes permanent and forces the switch to request authentication.