Brocade Fabric OS Administrators Guide (Supporting Fabric OS v7.3.0) - Manual (Page 181)

• .cer (binary)
• .crt (binary)
• .pem (text)
Typically, the CA provides the certificate files listed in the following table.
SSL certificate files TABLE 31
Certificate file Description
name .pem The switch certificate.
name Root.pem The root certificate. Typically, this certificate is already installed in the browser, but if not, you
must install it.
name CA.pem The CA certificate. It must be installed in the browser to verify the validity of the server certificate
or server validation fails.
NOTE
You must perform this procedure for each switch.
Use the following procedure to obtain a security certificate.
1. Generate and store the CSR as described in Generating and storing a Certificate Signing Request on
page 180.
2. Open a web browser window on the management workstation and go to the CA website. Follow the
instructions to request a certificate. Locate the area in the request form into which you are to paste
the CSR.
3. Through a Telnet window, connect to the switch and log in using an account with admin permissions.
4. Enter the secCertUtil showcsr command. The contents of the CSR are displayed.
5. Locate the section that begins with "BEGIN CERTIFICATE REQUEST" and ends with "END
CERTIFICATE REQUEST".
6. Copy and paste this section (including the BEGIN and END lines) into the area provided in the
request form; then, follow the instructions to complete and send the request.
It may take several days to receive the certificates. If the certificates arrive by e-mail, save them to an
FTP server. If the CA provides access to the certificates on an FTP server, make note of the path
name and make sure you have a login name and password on the server.
Installing a switch certificate
Before you import a switch certificate, be aware of the following:
• Certificate Authorities may provide their certificates in different encodings and different extensions.
Be sure to save the certificate with the applicable file extension before you import the certificate to
the switch.
Installing a switch certificate
Fabric OS Administrators Guide 181
53-1003130-01