S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
24-7
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
OL-9285-05
Chapter 24 Troubleshooting Digital Certificates
Digital Certificate Issues
Step 10
Follow these steps to import the identity certificate:
a.
In Device Manager, choose
Admin > Flash Files
and select
Copy,
then select
tftp
from the Protocol
radio buttons
to
tftp copy the CA certificate to bootflash.
b.
In Fabric Manager, choose
Switches > Security > PKI
and select the
TrustPoint Actions
tab.
c.
Select the
certimport
option from the Command drop-down menu to import an identity certificate
in this trust point.
Note
The identity certificate should be available in PEM format in a file in bootflash.
d.
Enter the name of the certificate file that was copied to bootflash in the URL field in the
bootflash:filename format.
e.
Click
Apply Changes
to save your changes.
If successful, the values of the identity certificate and its related objects, like the certificate file
name, are automatically updated with the appropriate values as per the corresponding attributes in
the identity certificate.
Configuring Certificates on the MDS Switch Using the CLI
To configure certificates on an MDS switch using the CLI, follow these steps:
Step 1
Configure the switch FQDN.
switch#
config t
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)#
switchname Vegas-1
Vegas-1(config)#
Step 2
Configure the DNS domain name for the switch.
Vegas-1(config)#
ip domain-name cisco.com
Vegas-1(config)#
Step 3
Create a trust point.
Vegas-1(config)#
crypto ca trustpoint myCA
Vegas-1(config-trustpoint)#
exit
Vegas-1(config)#
do show crypto ca trustpoints
trustpoint: myCA; key:
revokation methods: crl
Vegas-1(config)#
Step 4
Create an RSA key pair for the switch.
Vegas-1(config)#
crypto key generate rsa label myKey exportable modulus 1024
Vegas-1(config)#
do show crypto key mypubkey rsa
key label: myKey
key size: 1024
exportable: yes
Vegas-1(config)#
Step 5
Associate the RSA key pair to the trust point.
Vegas-1(config)#
crypto ca trustpoint myCA
