Cisco Systems 6500 manual crypto pki export pem, Defaults, Command Modes Command History, Release

Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module

crypto pki export pem

crypto pki export pem

To export privacy-enhanced mail (PEM) files from the SSL Services Module, use the crypto pki export pem command.

crypto pki export trustpoint_label pem {terminal {des 3des} {url url}} pass_phrase

Syntax Description	trustpoint-label	Name of the trustpoint.
	terminal	Displays the request on the terminal.
	des	Specifies the 56-bit DES-CBC encryption algorithm.
	3des	Specifies the 168-bit DES (3DES) encryption algorithm.
	url url	Specifies the URL location. Valid values are as follows:
		• ftp:—Exports to the FTP: file system
		• null:—Exports to the NULL: file system
		• nvram:—Exports to the NVRAM: file system
		• rcp:—Exports to the RCP: file system
		• scp:—Exports to the SCP: file system
		• system:—Exports to the system: file system
		• tftp:—Exports to the TFTP: file system
	pass-phrase	Pass phrase that is used to protect the private key.
Defaults	This command has no default settings.

Command Modes

Command History

Global configuration

Release	Modification
SSL Services Module	Support for this command was introduced on the Catalyst 6500 series
Release 1.2(1)	switches.
SSL Services Module	The syntax for this command changed from crypto ca to crypto pki.
Release 3.1(1)

Usage Guidelines The pass_phrase can be any phrase including spaces and punctuation except for the question mark (?), which has a special meaning to the Cisco IOS parser.

Pass-phrase protection associates a pass phrase with the key. The pass phrase is used to encrypt the key when it is exported. When this key is imported, you must enter the same pass phrase to decrypt it.

A key that is marked as unexportable cannot be exported.

Catalyst 6500 Series Switch SSL Services Module Command Reference

OL-9105-01 2-7