API Guide

validity days (OPTIONAL) Enter the keyword validity followed by the number of days for which
the certificate is valid.
NOTE: For CSRs, validity has no effect. For self-signed certificates, if
validity is not specified, it defaults to 3650 days, or 10 years.
length length (OPTIONAL) Enter the keyword length followed by a bit length value. The default key
length for both FIPS and non-FIPS mode is 2048. Minimum key length value for FIPS
mode is 2048. The range is from 2048 to 4096. Minimum key length value for non-FIPS
mode is 1024. The range is from 1024 to 4096.
altname altname (OPTIONAL) Enter the keyword altname followed by the subject alternate name for the
organization. For example, altname IP:192.168.1.100.
Defaults NA.
Command Modes EXEC Privilege
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking
OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command:
Version Description
9.11.0.0 Introduced the command.
Usage Information
The following RBAC roles are allowed to issue this command:
• sysadmin
• secadmin
If the cert-file option is not specified in the command, then the system interactively prompts you to fill in various
fields of the certificate signing request (CSR). You are prompted to fill out some metadata information for the
certificate. The following example shows the fields that you are prompted to fill:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank.
For some fields there will be a default value; if you enter '.', the field
will be left blank.
-----
Country Name (2 letter code) [US]:
State or Province Name (full name) [Some-State]:California
Locality Name (eg, city) []:San Francisco
Organization Name (eg, company) []:Starfleet Command
Organizational Unit Name (eg, section) []:NCC-1701A
Common Name (eg, YOUR name) [S4810-001]:
Email Address []:[e-mail]
You can enter only 256 characters per command. If you have field values that are larger than 256 characters in
length, use the interactive mode of the command.
Related
Commands
• crypto ca-cert install
crypto cert install
Installs a trusted certificate on a device.
Syntax
crypto cert install cert-file cert-path key-file {key-path | private} [password
passphrase]
Parameters
cert-file Enter the keyword cert-file to specify that the certificate needs to be downloaded.
cert-path Enter the path where the certificate is locally stored. The path can be a full path or a
relative path. If the system accepts this path, a notification is sent indicating the location
X.509v3 1729