Transferring Certificates And Private Keys To The Css - Cisco 11503 - CSS Content Services Switch Configuration Manual
Content services switch ssl configuration guide
Hide thumbs
Also See for 11503 - CSS Content Services Switch:
- Administration manual (392 pages) ,
- Hardware installation manual (184 pages) ,
- Getting started manual (142 pages)
Table of Contents
Advertisement
Importing or Exporting Certificates and Private Keys
Transferring Certificates and Private Keys to the CSS
Cisco Content Services Switch SSL Configuration Guide
3-14
To facilitate the import or export of certificates and private keys from or to the
CSS, use the copy ssl command. The CSS stores all imported files in a secure
location on the CSS. This command is available only in SuperUser mode.
The syntax for this command is:
copy ssl [protocol] ftp_record [import filename [format] "password"
{"passphrase"}|export filename2 "password"]
The variables are:
protocol - The type of protocol used to transfer the certificate and private key
•
file. The valid entries are sftp or ftp. Cisco Systems recommends the SFTP
protocol for the transport mechanism because it provides the most security.
ftp_record - The name of the previously-created FTP record containing the
•
remote host information.
import - Imports the file from the remote server.
•
filename - The name of the file you want to import from the server. Include
•
the full path to the file. You can enter a maximum of 128 characters.
format - The file format of the certificate to be imported. Once the certificate
•
file is converted to PEM format and DES encoded, it is stored on the CSS
SCM in a special (and secure) directory. The valid import file formats are:
DER - Binary format encoding of the certificate file in ASN.1 using the
–
Distinguished Encoding Rules (DER-encoded X509 certificate). For
example, an imported certificate from a Microsoft Windows NT IIS 4.0
server.
PEM - Privacy Enhanced Mail, a base64 encoding of the certificate file
–
(PEM-encoded X509 certificate). For example, an imported certificate
from an Apache/SSL UNIX server.
PKCS12 - Standard from RSA Data Security, Inc. for storing certificates
–
and private keys. For example, an imported certificate from a Microsoft
Windows 2000 IIS 5.0 server.
Chapter 3
Configuring SSL Certificates and Keys
OL-5655-01
Advertisement
Table of Contents
