Cisco Systems 6500 manual Usage Guidelines Examples, Related Commands crypto pki export pem

Chapter 2 Commands for the Catalyst 6500 Series Switch WebVPN Module

crypto pki import pem

Usage Guidelines

Examples

You will receive an error if you enter the pass phrase incorrectly.The pass phrase can be any phrase including spaces and punctuation except for the question mark (?), which has special meaning to the Cisco IOS parser.

Pass-phrase protection associates a pass phrase with the key. The pass phrase is used to encrypt the key when it is exported. When this key is imported, you must enter the same pass phrase to decrypt it.

When importing RSA keys, you can use a public key or its corresponding certificate.

The crypto ca import pem command imports only the private key (.prv), the server certificate (.crt), and the issuer CA certificate (.ca). If you have more than one level of CA in the certificate chain, you need to import the root and subordinate CA certificates before this command is used for authentication. Use the cut-and-paste feature or TFTP to import the root and subordinate CA certificates.

This example shows how to import a PEM-formatted file from the WebVPN Services Module:

wwbvpn(config)# crypto pki import TP5 pem url tftp://10.1.1.1/TP5 password

% Importing CA certificate...

Address or name of remote host [10.1.1.1]? Destination filename [TP5.ca]?

Reading file from tftp://10.1.1.1/TP5.ca

Loading TP5.ca from 10.1.1.1 (via Ethernet0/0.168): ! [OK - 1976 bytes]

%Importing private key PEM file...

Address or name of remote host [10.1.1.1]? Destination filename [TP5.prv]?

Reading file from tftp://10.1.1.1/TP5.prv

Loading TP5.prv from 10.1.1.1 (via Ethernet0/0.168): ! [OK - 963 bytes]

%Importing certificate PEM file...

Address or name of remote host [10.1.1.1]? Destination filename [TP5.crt]?

Reading file from tftp://10.1.1.1/TP5.crt

Loading TP5.crt from 10.1.1.1 (via Ethernet0/0.168): ! [OK - 1692 bytes]

%PEM files import succeeded. wwbvpn(config)# end webvpn#

*Apr 11 15:11:29.901: %SYS-5-CONFIG_I: Configured from console by console

Related Commands crypto pki export pem

Catalyst 6500 Series Switch WebVPN Module Command Reference—Release 1.1

2-22 OL-7310-01