AT-S62 Command Line User’s Guide

SET PKI CERTIFICATE

Syntax

set pki certificate=”name” [trusted=yesnoonofftruefalse] [type=caeeself]

Parameters

 

certificate

Specifies the certificate name whose trust or type you want

 

to change. The name is case sensitive. If the name contains

 

spaces, it must be enclosed in quotes.

trusted

Specifies whether or not the certificate is from a trusted CA.

 

Possible settings are:

 

yes, on, true

Specifies that the certificate is from a

 

 

trusted CA. This is the default. The options

 

 

are equivalent.

 

no, off, false

Specifies that the certificate is not from a

 

 

trusted CA. The options are equivalent.

type

Specifies a type for the certificate. Possible settings are:

 

ca

Tags the certificate as a CA certificate.

 

ee

Tags the certificate as belonging to another end

 

 

entity (EE). This is the default.

 

self

Tags the certificate as its own.

Description

This command changes the level of trust and type for a certificate in the switch’s certificate database. To list the certificates in the database, refer to SHOW PKI CERTIFICATE on page 530.

The TRUSTED parameter specifies whether the certificate is from a trusted CA. The default is TRUE. Only self-signed root CA certificates are typically set to be automatically trusted, and only after the user has checked the certificate’s fingerprint and other details using SHOW PKI CERTIFICATE on page 530.

525

Page 525
Image 525
Allied Telesis management software layer 2+ fast ethernet switches SET PKI Certificate, Entity EE. This is the default