Chapter 34: PKI Certificates and SSL
404 Section IX: Management Security
Guidelines
The guidelines for creating certificates are:
A certificate can have only one key.
A switch can use only those certificates that contain a key that was
generated on the switch.
You can create multiple certificates on a switch, but the device uses
the certificate whose key pair has been designated as the active key
pair for the switch’s web server.
Most web browsers support both unsecured (plaintext) and secured
(encrypted) operation. These modes are referred to as HTTP and
HTTPS, respectively. If you choose to use encryption when you
manage a switch, the web browser you use must support HTTPS.