Cisco Cisco SF302-08PP 8-port 10 100 PoE+ Managed Switch Referencia técnica
RSA and Certificate Commands
825
OL-32830-01 Command Line Interface Reference Guide
43
If both certificates 1 and 2 have been generated, use the ip https certificate
command to activate one of them.
command to activate one of them.
See Keys and Certificates for information on how to display and copy this key pair.
Erasing the startup configuration or returning to factory defaults automatically
deletes the default keys and they are recreated during device initialization.
deletes the default keys and they are recreated during device initialization.
Example
The following example generates a self-signed certificate for HTTPS whose
length is 2048 bytes.
length is 2048 bytes.
switchxxxxxx(config)#
crypto certificate 1 generate key-generate 2048
43.6 crypto certificate request
The crypto certificate request Privileged EXEC mode command generates and
displays a certificate request for HTTPS.
displays a certificate request for HTTPS.
Syntax
crypto certificate
number
request
[cn common- name
] [ou
organization-unit
] [or
organization
] [loc
location
] [st
state
] [cu
country]
Parameters
•
number
—Specifies the certificate number. (Range: 1–2)
•
The following elements can be associated with the key. When the key is
displayed, they are also displayed.
displayed, they are also displayed.
-
cn
common- name
—Specifies the fully qualified device URL or IP
address. (Length: 1–64 characters). If unspecified, defaults to the
lowest IP address of the device (when the certificate is generated).
lowest IP address of the device (when the certificate is generated).
-
ou
organization-unit
—Specifies the organization-unit or department
name. (Length: 1–64 characters)
-
or
organization
—Specifies the organization name. (Length: 1–64
characters)
-
loc
location
—Specifies the location or city name. (Length: 1–64
characters)