Brocade Secure Fabric OS Administrator's Guide - Supporting Fabric OS v3.2.0, v4.4.0, v5.0.1, v5.1.0, 5.2.0, and 5.3.0 (53-1000244-02, June 2007)

24 Secure Fabric OS Administrator’s Guide

53-1000244-02

8. Type q to quit the utility; then type y and press Enter to verify that you want to quit.

PKI CERTIFICATE INSTALLATION UTILITY pki_v1.0.6

FUNCTIONS

1) Retrieve CSRs from switches & write a CSR file

2) Install Certificates contained in a Certificate file

3) Generate a Licensed-Product/Installed-Certificates report

4) Help using PKI-Cert to get & install certificates

q) Quit PKI Certificate installation utility

Enter choice> q

QUIT? (y/n) y

Accessing PKI Certificate Help

The purpose of PKI help is to obtain command line information about PKICert and obtain advice on

advanced options for advanced users.

To access PKI help

1. Select option 4 (as shown in the following example) and follow the screen prompts

PKI CERTIFICATE INSTALLATION UTILITY pki_v1.0.6

FUNCTIONS

1) Retrieve CSRs from switches & write a CSR file

2) Install Certificates contained in a Certificate file

3) Generate a Licensed-Product/Installed-Certificates report

4) Help using PKI-Cert to get & install certificates

q) Quit PKI Certificate installation utility

Enter choice> 4

HELP USING PKI-CERT TO GET & INSTALL DIGITAL CERTIFICATIONS

NOTE:This utility will only work with switches running a FAB-OS version that

supports Fabric Security (e.g. >= v2.6, v3.2, v4.3)

1) Use PKI-Cert to get CSR’s (Certificate Signing Requests) which will be

written to a data file. The XML format file will contain CSR’s for each

switch (identified by its WWN).

2) Next, Upload the CSR file to the Brocade Security Upgrade website. A data

file will be emailed to you containing a set of digital Certificates, one

for each switch, in XML format.

3) Finally, use PKI-Cert to install the Certificates. You will be prompted

for the name of the data file containing the certificates.

Some options may be given on the command line such as “Log-Level.”

Read help for Batch/Command-Line mode usage (y/n)? > y