Cisco Systems Comprehensive Guide to Cisco Crypto PKI and Importing PKCS12 Certificates

Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module

crypto pki import pkcs12

crypto pki import pkcs12

To import a PKCS12 file to the SSL Services Module, use the crypto pki import pkcs12 command.

crypto pki import trustpoint_label pkcs12 file_system [pkcs12_filename] pass_phrase

Syntax Description	trustpoint_label	Specifies the trustpoint label.
	file_system	Specifies the file system. Valid values are as follows:
		• ftp:—Imports from the FTP: file system
		• nvram:—Imports from the NVRAM: file system
		• rcp:—Imports from the RCP: file system
		• scp:—Imports from the SCP: file system
		• tftp:—Imports from the TFTP: file system
	pkcs12_filename	(Optional) Specifies the name of the PKCS12 file to import.
	pass_phrase	Specifies the pass phrase of the PKCS12 file.
Defaults	This command has no default settings.

Command Modes

Command History

Global configuration

Release	Modification
Cisco IOS Release	Support for this command was introduced on the Catalyst 6500 series
12.1(13)E and	switches.
SSL Services Module
Release 1.1(1)
SSL Services Module	The syntax for this command changed from crypto ca to crypto pki.
Release 3.1(1)

Usage Guidelines If you are using SSH, we recommend using SCP (secure file transfer) when importing a PKCS12 file. SCP authenticates the host and encrypts the transfer session.

If you do not specify pkcs12_filename, you will be prompted to accept the default filename (the default filename is the trustpoint_label) or to enter the filename. For the ftp: or tftp: value, include the full path in the pkcs12_filename.

You will receive an error if you enter the pass phrase incorrectly.

If there is more than one level of CA, the root CA and all the subordinate CA certificates are exported in the PKCS12 file.

Catalyst 6500 Series Switch SSL Services Module Command Reference

OL-9105-01 2-13