Brocade Fabric OS Administrators Guide (Supporting Fabric OS v7.3.0) - Manual (Page 180)

of generating a key
Continue (yes, y, no, n): [no] y
Select key size [1024 or 2048]: 1024
Generating new rsa public/private key pair
Done.
Generating and storing a Certificate Signing Request
After generating a public/private key pair, you must generate and store a certificate signing request
(CSR).
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the secCertUtil gencsr command.
3. Enter the requested information.
Example of generating a CSR
Country Name (2 letter code, eg, US):US
State or Province Name (full name, eg, California):California
Locality Name (eg, city name):San Jose
Organization Name (eg, company name):Brocade
Organizational Unit Name (eg, department name):Eng
Common Name (Fully qualified Domain Name, or IP address): 192.1.2.3
Generating CSR, file name is: 192.1.2.3.csr
Done.
Your CA may require specific codes for Country, State or Province, Locality, Organization, and
Organizational Unit names. Make sure that your spelling is correct and matches the CA
requirements. If the CA requires that the Common Name be specified as an FQDN, make sure that
the fully qualified domain name is set on the domain name switch/director. The IP address or FQDN
is the switch where the certificate gets installed.
4. Enter the secCertUtil export command to store the CSR.
5. Enter the requested information. You can use either FTP or SCP.
Example of exporting a CSR
Select protocol [ftp or scp]: ftp
Enter IP address: 192.1.2.3
Enter remote directory: path_to_remote_directory
Enter Login Name: your account
Enter Password: your password
Success: exported CSR.
If you are set up for Secure Copy Protocol (SCP), you can select it; otherwise, select FTP. Enter the
IP address of the switch on which you generated the CSR. Enter the remote directory name of the
FTP server to which the CSR is to be sent. Enter your account name and password on the server.
Obtaining certificates
Once you have generated a CSR, you will need to follow the instructions on the website of the
certificate issuing authority that you want to use; and then obtain the certificate.
Fabric OS and HTTPS support the following types of files from the Certificate Authority(CA):
Generating and storing a Certificate Signing Request
180 Fabric OS Administrators Guide
53-1003130-01