Eaton Network-M3, User Manual

Page: 283 / 294

CLI
Information – 283
•
•
•
•
•
•
7.7.22.2 Help
certificates <target> <action> <service_name>
<target> :
- local
<action> :
- print: provides a given certificate detailed information.
- revoke: revokes a given certificate.
- export: returns a given certificate contents.
-
import : upload a given certificate for the server CSR. This will replace the CSR
with the certificate given.
- csr: get the server CSR contents. This will create the CSR if not already existing.
<service_name>: mqtt/syslog/webserver
7.7.22.3 Examples of usage
7.7.22.3.1 From a linux host:
print over SSH: sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates local print $SERVICE_NAME
revoke over SSH: sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates local revoke $SERVICE_NAME
export over SSH: sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates local export $SERVICE_NAME
import over SSH: cat $FILE | sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates local import $SERVICE_NAME
csr over SSH: sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates local csr mqtt
7.7.22.3.2 From a Windows host: (plink tools from putty is required)
print over SSH: plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates local print $SERVICE_NAME
revoke over SSH: plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates local revoke $SERVICE_NAME
export over SSH: plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates local export $SERVICE_NAME
import over SSH: type $FILE | plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates local import
$SERVICE_NAME
csr over SSH: plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates local csr mqtt
7.7.22.3.3 Where:
$USER is user name (the user shall have administrator profile)
$PASSWORD is the user password
$PASSPHRASE is any passphrase to encrypt/decrypt sensible data.
$CARD_ADDRESS is IP or hostname of the card
$FILE is a certificate file
$SERVICE_NAME is the name one of the following services : mqtt / syslog / webserver.
7.7.22.4 Specifics
7.7.22.5 Access rights per profiles
Administrator Operator Viewer
certificates