394Managing Keys and Certificates

Creating Self-Signed Certificates

To manage the security of the WSS switch for administrative access by WLAN Management Software and Web View, and the security of communication with 802.1X users and Web AAA users, create Admin, EAP, and Web AAA public-private key pairs and self-signed certificates. Follow these steps:

1Set time and date parameters, if not already set. (See “Configuring and Managing Time Parameters” on page 136.)

2Generate public-private key pairs:

23x0# crypto generate key admin 1024 key pair generated

23x0# crypto generate key eap 1024 key pair generated

23x0# crypto generate key webaaa 1024 key pair generated

3Generate self-signed certificates:

23x0# crypto generate self-signed admin

Country Name: US

State Name: CA

Locality Name: San Francisco

Organizational Name: example

Organizational Unit: IT

Common Name: WSS 6

Email Address: admin@example.com

Unstructured Name: WSS in wiring closet 4

Self-signed cert for admin is

-----BEGIN CERTIFICATE-----

MIICUzCCAbygAwIBAgICA+cwDQYJKoZIhvcNAQEEBQAwNjELMAkGA1UEBhMCVVW

SS CzAJBgNVBAgTAkNBMRowGAYDVQQDFBF0ZWNocHVic0B0cnB6LmNvbTAeFw0wMzA 0

...

Lm8wmVYLxP56APCUAm9O8C2foYgOY40=

-----ENDCERTIFICATE-----23x0#crypto generate self-signed eap

Country Name: US

State Name: CA

Locality Name: San Francisco

Organizational Name: example

Organizational Unit: IT

Common Name: WSS 6

Email Address: admin@example.com

Unstructured Name: WSS in wiring closet 4

Self-signed cert for eap is

-----BEGIN CERTIFICATE-----

320657-A

Page 394
Image 394
Nortel Networks 2300 manual Creating Self-Signed Certificates, 23x0# crypto generate self-signed admin