Reference Guide

Brocade Fabric OS Command Reference 951
53-1004112-02
secCertUtil
delkey
Deletes all public/private key pairs with the exception of Encryption-related certificates and
key pairs. This command prompts for confirmation unless -nowarn is specified.
-nowarn
Executes the delete operation without confirmation.
-all
Deletes all public/private key pairs including Encryption-related certificates and key pairs.
gencsr
Generates a new CSR for the switch. This is the second step in setting up a third-party
certificate. The following operands are optional; if omitted, the command prompts for
answers to a series of questions. If only one or a few operands are specified. the command
prompts for input to the remaining questions. When all questions are answered, a CSR is
generated and placed in a file named ip_address.csr, where ip_address is the IP address of
the switch.
-hash sha1 | sha256
Sets the hash type. Valid values are "sha256" and "sha1".
-country country code
Specifies the country. Provide a two-letter country code, for example, US.
-state state
Specifies the state. Provide the full name, for example, California. If the state consists of
multiple words, it must be enclosed in double quotes.
-locality locality
Specifies the city. Provide the full name, for example, "San Jose". If the locality consists of
multiple words, it must be enclosed in double quotes.
-org organization
Specifies the organization. Provide the full name, for example, Brocade. If the organization
consists of multiple words, it must be enclosed in double quotes.
-orgunit organization unit
Specifies the organizational unit, for example, your department name. If the organizational
unit consists of multiple words, it must be enclosed in double quotes.
-cn common name
Specifies the common name. Provide a fully qualified Domain Name, or IP address.
showcsr
Displays the content of the CSR on the switch without page breaks. Use the pipe operator
followed by the "more" option to display the content one page at a time.
delcsr [-nowarn]
Deletes the CSR. This command prompts for confirmation before deleting the CSR unless
-nowarn is specified.
generate
Generates the certificate.
-fcap
Generates FCAP switch CSR, passphrase, and key.