ProCurve 800, Configuration Manual, Page: 184 / 406

3-56
Initial Setup of the ProCurve NAC 800
Digital Certificates
Generate a Key
Before submitting a certificate request for your NAC 800, you must generate
the certificate’s public/private keypair. The NAC 800 includes the public key
in the request but keeps the private key only in its own keystore, which is
protected with a password.
Follow these steps to generate the key:
1. Log in as root to the NAC 800 OS.
2. Move to the /usr/local/nac/keystore directory.
ProCurve NAC 800:# cd /usr/local/nac/keystore
3. Remove the default keystore:
ProCurve NAC 800:/usr/local/nac/keystore:# rm -f compliance.keystore
4. Enter this command:
For example:
ProCurve NAC 800:/usr/local/nac/keystore:# keytool
-genkey -alias mynac.procurve.com -keyalg RSA
-keystore compliance.keystore
5. When prompted, enter this password for the keystore: changeit . (You
must enter this password.)
6. Next you are prompted to enter information that will be included in the
certificate that uses this key. For the first and last name, enter the NAC
800’s exact FQDN.
7. The command line displays the information that you entered. If it is
correct, type
[y]
and press
[Enter]
. If you need to edit the information,
press
[Enter]
only.
Syntax: keytool -genkey -alias < keyname > -keyalg [rsa | dsa] -keystore compli-
ance.keystore
Replace < keyname > with a name that you choose for the key’s
alias in the
compliance.keystore
file. Make a note of the name:
you will need it when you generate a certificate request or
self-signed certificate that uses this keypair.
The asymmetric algorithms supported by the NAC 800 for the
keypair include Rivest, Shamir, and Adelman (RSA) and
Digital Signature Algorithm (DSA); choose one or the other
for the
-keyalg option.