Creating a master password for export of ssl keys, Deleting certificate and key files – Brocade Communications Systems ServerIron ADX 12.4.00a User Manual
Page 165
ServerIron ADX Security Guide
151
53-1002440-03
Configuring SSL on a ServerIron ADX
6
After transferring the file, it can be used both as a key and a certificate. To add the certificate file
and keys to the profile, use the following commands:
ServerIronADX(config-ssl-profile-mysslprofile)# keypair-file mypkcsfile
ServerIronADX(config-ssl-profile-mysslprofile)# certificate-file mypkcsfile
The show ssl cert command can be used to display a pkcs file. The show ssl key command does not
display a pkcs file, but it does contain a keypair.
Creating a Master Password for export of SSL keys
You can create a master password that grants permission to export all SSL keys on a ServerIron
ADX using SCP copy. This password is used with the "scp
password is not configured, a separate password associated with each key must be used.
To define a master password for the export of SSL keys, use the following command.
ServerIronADX# ssl set export-master-pswd exportpw
Syntax: ssl set export-master-pswd
The
24 characters in length.
To disable a master password for export of SSL keys, use the following command.
ServerIronADX# ssl clear export-master-pswd exportpw
Syntax: ssl clear export-master-pswd
The
remove.
Use the following command to display whether a master password is in effect.
ServerIronADX# show ssl key *
master-password enable
ssl key files:
1 : key-test
2 : key1
3 : keyz
4 : keyc
5 : key7
Syntax: show ssl key *
Deleting certificate and key files
You can use the following commands to delete a specified certificate or key file as shown.
ServerIronADX# ssl clear certfile
Syntax: ssl clear certfile
The
ServerIronADX# ssl clear keyfile
Syntax: ssl clear certfile
The