3Com WX4400 3CRWX440095A manual Crypto generate key admin domain eap ssh web 128 512 1024

Table 37

Creating Keys and Certificates 421

Procedures for Creating and Validating Certificates (continued)

File Type	Steps Required		Instructions
PKCS #12 object	1	Copy a PKCS #12 object file	“Installing a Key
file certificate		(public-private key pair, server	Pair and Certificate
		certificate, and CA certificate) from	from a PKCS #12
		a CA onto the WX switch.	Object File” on
	2	Enter the one-time password to	page 423
		unlock the file.
	3	Unpack the file into the switch’s
		certificate and key store.
Certificate Signing	1	Generate a public-private key pair	„	“Creating
Request (CSR)		on the WX switch.		Public-Private
certificate	2	Generate a CSR on the switch as a		Key Pairs” on
				page 421
		PKCS #10 object file.
				“Creating a CSR
	3	Give the CSR to a CA and receive a	„
				and Installing a
		signed certificate (a PEM-encoded
				Certificate from
		PKCS #7 object file).
				a PKCS #7
	4
		Paste the PEM-encoded file into the		Object File” on
		CLI to store the certificate on the		page 424
		WX switch.	„	“Installing a
	5
		Obtain and install the CA’s own		CA’s Own
		certificate.		Certificate” on
				page 425

Creating To use a self-signed certificate or Certificate Signing Request (CSR) Public-Private Key certificate for WX switch authentication, you must generate a

Pairs public-private key pair.

To create a public-private key pair, use the following command:

crypto generate key {admin domain eap ssh web} {128 512 1024 2048}

Choose the key length based on your need for security or to conform with your organization’s practices. For example, the following command generates an administrative key pair of 1024 bits:

You must paste the entire block, from the beginning

-----BEGIN CERTIFICATE REQUEST-----	to the end
-----END CERTIFICATE REQUEST-----.

#crypto generate key admin 1024 admin key pair generated