beautypg.com

Dell POWEREDGE M1000E User Manual

Page 865

background image

Fabric OS Command Reference

833

53-1001764-02

secCertUtil

2

Examples

To generate a public/private key pair in interactive mode:

switch:admin>

seccertutil genkey

Generating a new key pair will automatically do the following:

1. Delete all existing CSRs.

2. Delete all existing certificates.

3. Reset the certificate filename to none.

4. Disable secure protocols.

Continue (yes, y, no, n): [no]

y

Select key size [1024 or 2048]

: 1024

Generating new rsa public/private key pair

Done.

To generate a public/private key pair in noninteractive mode:

switch:admin>

seccertutil genkey -nowarn -keysize 1024

Generating new rsa public/private key pair

Done.

To generate a CSR in interactive mode:

switch:admin>

seccertutil gencsr

Country Name (2 letter code, eg, US):

US

State or Province Name (full name, eg, California):

California

Locality Name (eg, city name):

San Jose

Organization Name (eg, company name):

Brocade

Organizational Unit Name (eg, department or section name):

IT

Common Name (Fully qualified Domain Name, or IP address):

192.168.38.206

generating CSR, file name is:

192.168.38.206.csr

Done

To generate a CSR in noninteractive mode:

switch:admin>

seccertutil gencsr -country US -state California -locality "San Jose" \

-org Brocade -orgunit software -cn 192.168.38.206
generating CSR, file name is: 192.168.38.206.csr

Done

To delete the CSR in interactive mode:

switch:admin>

seccertutil delcsr

WARNING!!!

About to delete CSR: 192.168.163.238.csr

ARE YOU SURE (yes, y, no, n): [no]

y

To delete a CSR in noninteractive mode:

switch:admin>

seccertutil delcsr -nowarn

To import an LDAP certificate from a remote host to the local switch in interactive mode:

switch:admin>

seccertutil import -ldapcacert

Select protocol [ftp or scp]:

ftp

Enter IP address:

195.168.38.206

Enter remote directory:

/users/home/remote_certs

Enter certificate name (must have ".crt", ".cer" or ".pem" suffix):

ldap.cer