D-Link DXS-3250 - xStack Switch - Stackable, Cli Manual

Page: 433 / 466

D-Link CLI Reference Guide
Page 432
crypto certificate generate
The crypto certificate generate Global Configuration mode command generates a self-signed HTTPS
certificate.
Syntax
crypto certificate [number] generate [key-generate length][cn common- name][ou organization-unit][or
organization] [loc location] [st state] [cu country] [duration days]
Parameters
•
number — Specifies the certificate number. (Range: 1 - 2)
•
key-generate — Regenerate the SSL RSA key.
•
length — Specifies the SSL RSA key length. (Range: 512 - 2048)
•
common- name — Specifies the fully qualified URL or IP address of the device.
(Range: 1 - 64)
•
organization — Specifies the organization name. (Range: 1 - 64)
•
organization-unit — Specifies the organization-unit or department name.(Range: 1 - 64)
•
location — Specifies the location or city name. (Range: 1 - 64)
•
state — Specifies the state or province name. (Range: 1 - 64)
•
country — Specifies the country name. (Range: 2 - 2)
•
days — Specifies number of days certification is valid. (Range: 30 - 3650)
Default Configuration
The Certificate and SSL’s RSA key pairs do not exist.
If no certificate number is specified, the default certificate number is 1.
If no RSA key length is specified, the default length is 1024.
If no URL or IP address is specified, the default common name is the lowest IP address of the device at the time
that the certificate is generated.
If the number of days is not specified, the default period of time that the certification is valid is 365 days.
Command Mode
Global Configuration mode
User Guidelines
The command is not saved in the device configuration; however, the certificate and keys generated by this
command are saved in the private configuration (which is never displayed to the user or backed up to another
device).
Use this command to generate a self-signed certificate for the device.
If the RSA keys do not exist, parameter key-generate must be used.
Example
The following example regenerates an HTTPS certificate.
Console(config)# crypto certificate 1 generate key-generate