3com WXR100 3CRWXR10095A User Manual

C

HAPTER

 20: M

ANAGING

 K

EYS

 

AND

 C

ERTIFICATES

Some key lengths apply only to specific key types. For example, 

applies only to domain keys.

SSH requires an SSH authentication key, but you can allow MSS to 
generate it automatically. The first time an SSH client attempts to access 
the SSH server on a WX switch, the switch automatically generates a 
1024-byte SSH key. If you want to use a 2048-byte key instead, use the 
crypto generate key ssh 2048 command to generate one.

After creating a public-private key pair, you can generate a self-signed 
certificate. To generate a self-signed certificate, use the following 
command:

crypto generate self-signed {admin | eap | web}

When you type the command, the CLI prompts you to enter information 
to identify the certificate. For example:

# crypto generate self-signed admin
Country Name: US
State Name: CA
Locality Name: San Jose campus
Organizational Name: mycorp
Organizational Unit: eng
Common Name: WX1
Email Address: admin@example.com
Unstructured Name: WX in wiring closet 120
success: self-signed cert for admin generated

You must include a common name (string) when you generate a 
self-signed certificate. The other information is optional. Use a fully 
qualified name if such names are supported on your network. The 
certificate appears after you enter this information.