Users Guide

Switch Management Commands 2441
YDi3nj9rk3XjyT5pq5VR4YnECfGKcvKsz5fDAgMBAAGgADANBgkqhkiG9w0BAQUF
AAOBgQCd7MvbUt2yb0+piCazzvwyEpfXZckgY8B9tFaUgxD6plc88xbfRDIKQXor
K85z4bDogjxDZuYTnvZV4aZJLshGUmUZS4cin2TaxHHIf5gI597x5FFYBFTKqSl4
YhfgJtA2BJ/W23xmCrIT00ZINIfwf+PN6cDt2R3ag3hC/+otXw==
-----END CERTIFICATE REQUEST-----
crypto certificate import
Use the crypto certificate import command in Global Configuration mode to
import a certificate signed by a Certification Authority for HTTPS.
Syntax
crypto certificate number import
•
number — Specifies the certificate number. (Range: 1–2)
Default Configuration
This command has no default configuration.
Command Mode
Global Configuration mode
User Guidelines
Use this command to enter an external certificate (signed by a Certification
Authority) to the switch. To end the session, add a period (.) on a separate
line after the input, and press ENTER.
The imported certificate must be based on a certificate request created by the
crypto certificate request command.
If the public key found in the certificate does not match the switch's SSL RSA
key, the command fails.
Regenerating the RSA key will render existing certificates invalid.
Certificates are validated on input. The system log will show any encountered
certificate errors such as invalid format or if the certificate could not be
validated against the switch private key. Invalid certificates are not imported.
The signed certificate must contain the switch public key and match the RSA
key on the switch and must be in X509 PEM text format.