Users Guide

X.509v3 commands
certificate
Configures a certificate and private key pair in an application-specific security profile.
Syntax
certificate certificate-name
Parameters certificate-name — Enter the name of the certificate-key pair as it appears in the show crypto
certs output without the .pem extension.
Default Not configured
Command mode SEC-PROFILE
Usage
information
Use the certificate command to associate a certificate and private key with a security profile.
An application-specific security profile allows you to change the certificate-key pair used by an OS10
application, such as SmartFabric services, without interrupting the service of other mission-critical
applications.
When you install a certificate-key pair, both take the name of the certificate. Enter the certificate-key
pair name without an extension as the certificate-name value. To remove a certificate-key pair from
the profile, enter the no certificate command.
Example
OS10# crypto security-profile secure-radius-profile
OS10(config-sec-profile)# certificate Dell_host1
Supported
releases
10.4.3.0 or later
cluster security-profile
Creates a security profile for a cluster application.
Syntax
cluster security-profile profile-name
Parameters profile-name — Enter the name of the security profile; a maximum of 32 characters.
Default Not configured
Command mode CONFIGURATION
Usage
information
When you enable VLT or a fabric automation application, switches that participate in the cluster use
secure channels to communicate with each other. OS10 installs a default X.509v3 certificate-key pair
to establish secure channels between the peer devices in a cluster. If untrusted devices access the
management or data ports on the switch, replace the default certificate-key pair with a custom X.509v3
certificate-key pair using the cluster security-profile command. A security profile associates a
certificate and private key pair using the certificate command. The no form of the command deletes
the cluster security profile.
Example
OS10(config)# cluster security-profile secure-cluster
OS10(config)#
Supported
releases
10.4.3.0 or later
crypto ca-cert delete
Deletes a CA certificate.
Syntax
crypto ca-cert delete {ca-cert-filepath | all}
Parameters
● ca-cert-filepath — Enter the local path where the downloaded CA certificate is stored; for
example, home://CAcert.pem or usb://CA-cert.pem.
1378 Security