Connectivity Guide
crypto ca-cert install
Installs a certicate from a Certicate Authority that is copied to the switch.
Syntax
crypto ca-cert install ca-cet-filepath [filename]
Parameters
• ca-cert-filepath — Enter the local path where the downloaded CA certicate is stored; for example,
home://CAcert.pem or usb://CA-cert.pem.
• filename — (Optional) Enter the lename that the CA certicate is stored under in the OS10 trust store
directory. Enter the lename in the filename.crt format.
Default Not congured
Command mode EXEC
Usage information Before using the crypto ca-cert install command, copy the certicate to the home directory on the
switch using a secure connection, such as HTTPS, SCP, or SFTP. After successful installation, the subject and
issuer of the CA certicate are displayed. To delete a trusted certicate, use the crypto ca-cert delete
command.
Example
OS10# crypto ca-cert install home://GeoTrust_Universal_CA.crt
Processing certificate ...
Installed Root CA certificate
CommonName = GeoTrust Universal CA
IssuerName = GeoTrust Universal CA
Supported releases 10.4.3.0 or later
crypto cert delete
Deletes an installed host certicate and the private key created with it.
Syntax
crypto cert delete filename [fips]
Parameters
• filename — Enter the le name of the host certicate as displayed in the show crypto cert command.
• fips — (Optional) Delete a FIPS-compliant certicate-key pair. To verify whether a certicate is non-FIPS or
FIPS-compliant., enter the
show crypto cert command.
Default Not congured
Command mode EXEC
Usage information When you delete the system's certicate, you also delete the private key. Do not delete a host certicate that is
used in a security prole. To display the currently installed host certicate and associated key, use the show
crypto cert command.
NOTE: A FIPS-compliant and non-FIPS certicate may have the same le name. To delete a FIPS-
compliant certicate, you must enter the fips parameter in the command.
Example
OS10# crypto cert delete Dell_host1_CA1.pem
Certificate and keys were successfully deleted. CN = Dell_host1_CA1
Supported releases 10.4.3.0 or later
840 Security