Cisco Catalyst 2960 Series, Configuration Manual

Page: 1911 / 2288

Generating a Certificate
Perform this task to generate a certificate. To generate an X.509 certificate, use the openssl req command.
SUMMARY STEPS
1. openssl req -new -x509 -key private-key-file -out certificate-file -days expiration-days
2.
ls -l
DETAILED STEPS
Step 1
openssl req -new -x509 -key private-key-file -out certificate-file -days expiration-days
This command creates an X.509 certificate, with full access to a private key that is stored in the private-key-file file, and
stores the certificate in the certificate-file file. The certificate is configured to expire in expiration-days days.
To complete the command, enter the following Distinguished Name (DN) information when prompted:
• Country name
• State or province name
• Organization name
• Organizational unit name
• Common name
• Email address
At each prompt, text enclosed in square brackets indicates the default value that will be used if you do not enter a value
before you press Enter.
This example shows how to create an X.509 certificate that has full access to the private key in the privkey.pem file.
The certificate is written to the cert.pem file and will expire 1095 days after the creation date.
Example:
Host%
openssl req -new -x509 -key privkey.pem -out cert.pem -days 1095
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value, If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:
US
State or Province Name (full name) [Berkshire]: California
Locality Name (eg, city) [Newbury]:
San Jose
Organization Name (eg, company) [My Company Ltd]:
Cisco Systems, Inc.
Organizational Unit Name (eg, section) []:
DEPT_ACCT
Common Name (eg, your name or your server's hostname) []: Jane
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1829
How to Configure Signed Tcl Scripts