API Guide

If you reconfigure crypto security profile-name, configured Syslog TLS servers are automatically updated to use the new
certificate-key pair used by the new profile.
If you reconfigure the certificate assigned to a crypto security profile, Syslog TLS servers are automatically updated to use
new certificate-key pair.
If you delete a certificate from a configured crypto security profile, system logging over TLS fails. A host certificate is
required for the protocol exchange with an external device.
4. Configure a remote TLS server to receive system messages in CONFIGURATION mode.
logging server {ipv4–address | ipv6–address} tls [port-number]
[severity severity-level] [vrf {management | vrf-name]
Example: Configure Syslog over TLS
OS10# copy tftp://CAadmin:secret@172.11.222.1/cacert.pem home://cacert.pem
OS10# crypto ca-cert install home://cacert.pem
Processing certificate ...
Installed Root CA certificate
CommonName = Certificate Authority CA
IssuerName = Certificate Authority CA
OS10# show crypto ca-certs
--------------------------------------
| Locally installed certificates |
--------------------------------------
cacert.crt
OS10# crypto cert generate request cert-file home://clientreq.pem key-file home://
clientkey.pem cname "Top of Rack 6" altname "IP:10.0.0.6 DNS:tor6.dell.com" email
[e-mail] organization "Dell EMC" orgunit Networking locality "Santa Clara" state
California country US length 2048
Processing certificate ...
Successfully created CSR file /home/admin/clientreq.pem and key
OS10# copy home://clientreq.pem scp://CAadmin:secret@172.11.222.1/clientreq.pem
OS10# copy scp://CAadmin:secret@172.11.222.1/clientcert.pem home://clientcert.pem
OS10# copy scp://CAadmin:secret@172.11.222.1/clientkey.pem home://clientkey.pem
OS10# crypto cert install cert-file home://clientcert.pem key-file home://clientkey.pem
Processing certificate ...
Certificate and keys were successfully installed as "clientcert.crt" that may be used in
a security profile. CN = 10.0.0.6
OS10# show crypto cert
--------------------------------------
| Installed non-FIPS certificates |
--------------------------------------
clientcert.crt
--------------------------------------
| Installed FIPS certificates |
--------------------------------------
OS10(config)# crypto security-profile dellprofile
OS10(config-sec-profile)# certificate clientcert
OS10(config-sec-profile)# exit
OS10(config)# logging security-profile dellprofile
OS10(config)# logging server 10.11.86.139 tls
OS10(config)# do show running-configuration logging
!
logging security-profile dellprofile
logging server 10.11.86.139 tls 514
View system logs
The system log-file contains system event and alarm logs.
1438
Troubleshoot Dell EMC SmartFabric OS10