Users Guide

Dell PowerConnect ArubaOS 5.0 | User Guide Management Access | 505
4. Click View Current to display the generated CSR. Select and copy the CSR output between the BEGIN
CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines, paste it into an email and send it to
the CA of your choice.
In the CLI
1. Run the following command:
crypto pki csr key {1024|2048|4096} common-name <value> country <country>
state_or_province <state> city <city> organization <org> unit <string> email <email>
2. Display the CSR output with the following command:
show crypto pki csr
3. Copy the CSR output between the BEGIN CERTIFICATE REQUEST and END CERTIFICATE
REQUEST lines, paste it into an email and send it to the CA of your choice.
Obtaining a Client Certificate
You can use the CSR generated on the controller to obtain a certificate for a client. However, since there may be
a large number of clients in a network, you typically obtain client certificates from a corporate CA server. For
example, in a browser window, enter http://<ipaddr>/crtserv, where <ipaddr> is the IP address of the CA server.
Importing Certificates
You must use the WebUI to import certificates into the controller. You cannot use a CLI command to import
certificates, although a ‘crypto-local pki’ command is saved to the configuration file when you import a certificate
from the WebUI.
You can import the following types of certificates into the controller using the WebUI:
z Server certificate signed by a trusted CA. This includes a public and private key pair.
z CA certificate used to validate other server or client certificates. This includes only the public key for the
certificate.
Table 105 CSR Parameters
Parameter Description Range
key
Length of private/public key. 1024/2048/4096
common_name
Typically, this is the host and domain name, as in
www.yourcompany.com.
—
country
Two-letter ISO country code for the country in which your
organization is located.
state_or_province
State, province, region, or territory in which your organization is
located.
city
City in which your organization is located.
organization
Name of your organization.
unit
Optional field to distinguish a department or other unit within your
organization.
email Email address referenced in the CSR.
Note: You cannot export certificates from the controller.