Chapter 3 Commands Specific to the Content Switching Module with SSL

crypto ca import pkcs12

crypto ca import pkcs12

To import a PKCS12 file to the Content Switching Module with SSL, use the crypto ca import command.

crypto ca import trustpoint_label pkcs12 file_system [pkcs12_filename] pass_phrase

Syntax Description

 

trustpoint_label

Specifies the trustpoint label.

 

 

file_system

Specifies the file system. Valid values are as follows:

 

 

 

ftp:—Imports from the FTP: file system

 

 

 

nvram:—Imports from the NVRAM: file system

 

 

 

rcp:—Imports from the RCP: file system

 

 

 

scp:—Imports from the SCP: file system

 

 

 

tftp:—Imports from the TFTP: file system

 

 

 

 

 

 

pkcs12_filename

(Optional) Specifies the name of the PKCS12 file to import.

 

 

 

 

 

 

pass_phrase

Specifies the pass phrase of the PKCS12 file.

 

 

 

 

 

 

 

Defaults

 

This command has no default settings.

Command Modes

Command History

Global configuration

Release

Modification

Cisco IOS Release

Support for this command was introduced on the Catalyst 6500 series

12.1(13)E and

switches.

SSL Services Module

 

Release 1.1(1)

 

 

 

CSM-S release 1.1(1)

This command was introduced.

 

 

Command Modes If you are using SSH, we recommend using SCP (secure file transfer) when importing a PKCS12 file. SCP authenticates the host and encrypts the transfer session.

If you do not specify pkcs12_filename, you will be prompted to accept the default filename (the default filename is the trustpoint_label) or to enter the filename. For the ftp: or tftp: value, include the full path in the pkcs12_filename.

You will receive an error if you enter the pass phrase incorrectly.

If there is more than one level of CA, the root CA and all the subordinate CA certificates are exported in the PKCS12 file.

Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference

3-14

OL-7029-01

 

 

Page 236
Image 236
Cisco Systems OL-7029-01 manual Crypto ca import pkcs12, This command has no default settings