Nortel Networks 2300 Series manual Cryptography Commands

479

Cryptography Commands

A digital certificate is a form of electronic identification for computers. The WSS requires digital certificates to authen- ticate its communications to WLAN Management Software and Web View, to Web-based AAA clients, and to Extensible Authentication Protocol (EAP) clients for which the WSS performs all EAP processing. Certificates can be generated on the WSS or obtained from a certificate authority (CA). Keys contained within the certificates allow the WSS, its servers, and its wireless clients to exchange information secured by encryption.

Note. If the switch does not already have certificates, WSS Software automatically generates the missing ones the first time you boot using WSS Software Version 4.1 or later. You do not need to install certificates unless you want to replace the ones automatically generated by WSS Software. (For more information, see the “Certificates Automatically Generated by WSS Software” section in the “Managing Keys and Certificates” chapter of the Nortel WLAN Security Switch 2300 Series Configuration Guide.)

Note. Before installing a new certificate, verify with the show timedate and show timezone commands that the WSS is set to the correct date, time, and time zone. Otherwise, certificates might not be installed correctly.

This chapter presents cryptography commands alphabetically. Use the following table to locate commands in this chapter based on their use.

Encryption Keys	crypto generate key on page 472
	show crypto key domain on page 481
	show crypto key ssh on page 481
PKCS #7 Certificates	crypto generate request on page 473
	crypto ca-certificate on page 470
	show crypto ca-certificate on page 479
	crypto certificate on page 471
	show crypto certificate on page 480
PKCS #12 Certificate	crypto otp on page 476
	crypto pkcs12 on page 477
Self-Signed Certificate	crypto generate self-signed on page 475

Nortel WLAN—Security Switch 2300 Series Command Line Reference