D-Link dws-1008 manual Encryption Keys, PKCS#7 Certificates, PKCS#12 Certificate

Cryptography Commands

A digital certificate is a form of electronic identification for computers. The switch requires digital certificates to authenticate its communications to Web View, to WebAAA clients, and to Extensible Authentication Protocol (EAP) clients for which the switch performs all EAP processing. Certificates can be generated on the switch or obtained from a certificate authority (CA). Keys contained within the certificates allow the switch, its servers, and its wireless clients to exchange information secured by encryption.

Note: If the switch does not already have certificates, MSS automatically generates the missing ones the first time you boot using MSS Version 4.2 or later. You do not need to install certificates unless you want to replace the ones automatically generated by MSS.

Note: Before installing a new certificate, verify with the show timedate and show timezone commands that the switch is set to the correct date, time, and time zone. Otherwise, certificates might not be installed correctly.

Encryption Keys	crypto generate key on page 217
	show crypto key domain on page 226
	show crypto key ssh on page 226
PKCS#7 Certificates	crypto generate request on page 218
	crypto ca-certificate on page 215
	show crypto ca-certificate on page 224
	crypto certificate on page 216
	show crypto certificate on page 225
PKCS#12 Certificate	crypto otp on page 222
	crypto pkcs12 on page 223
Self-Signed Certificate	crypto generate self-signed on page 220

D-Link DWS-1008 CLI Manual 214