Nortel Networks 2300 manual 23x0# crypto generate request admin

Managing Keys and Certificates 391

Creating a CSR and Installing a Certificate from a PKCS #7 Object File

After creating a public-private key pair, you can obtain a signed certificate of authenticity from a CA by generating a Certificate Signing Request (CSR) from the WSS switch. A CSR is a text block with an encoded request for a signed certificate from the CA.

Note. Many certificate authorities have their own unique requirements. Follow the instructions in the documentation for your CA to properly format the fields you complete when generating a CSR.

1To generate a request for a CA-signed certificate, use the following command: crypto generate request {admin eap webaaa}

When prompted, enter values for each of six identification fields.

You must include a common name (string) when you generate a CSR. Use a fully qualified name if such names are supported on your network. The other information is optional. For example:

23x0# crypto generate request admin

Country Name: US

State Name: MI

Locality Name: Detroit

Organizational Name: example

Organizational Unit: eng

Common Name: WSS-34

Email Address: admin@example.com

Unstructured Name: south tower, wiring closet 125

When completed successfully, the command returns a Privacy-Enhanced Mail (PEM)-formatted PKCS #10 CSR. PEM encoding is a way of representing a non-ASCII file format in ASCII characters. The encoded object is the PKCS #10 CSR. Give the CSR to a CA and receive a signed certificate (a PEM-encoded PKCS #7 object file).

2To install a certificate from a PKCS #7 file, use the following command to prepare the switch to receive it:

crypto certificate {admin eap webaaa} PEM-formatted certificate

3Use a text editor to open the PKCS #7 file, and copy and paste the entire text block, including the beginning and ending delimiters, into the CLI.

Note. You must paste the entire block, from the beginning

-----BEGIN CERTIFICATE REQUEST----- to the end

-----END CERTIFICATE REQUEST-----.

Nortel WLAN Security Switch 2300 Series Configuration Guide