Brocade Fabric OS Command Reference - Supporting Fabric OS v7.0.1 (53-1002447-01, March 2012)

Fabric OS Command Reference 877
53-1001764-01
secCertUtil
2
-org organization
Specifies the organization. Provide the full name, for example, Brocade. If the
organization consists of multiple words, it must be enclosed in double quotes.
-orgunit organization unit
Specifies the organizational unit, for example, your department name. If the
organizational unit consists of multiple words, it must be enclosed in double
quotes.
-cn common name
Specifies the common name. Provide a fully qualified Domain Name, or IP
address.
showcsr
Displays the content of the CSR on the switch without page breaks. Use the pipe
operator followed by the "more" option to display the content one page at a time.
delcsr [-nowarn]
Deletes the CSR. This command prompts for confirmation before deleting the
CSR unless -nowarn is specified.
generate -fcapall
Generates FCAP switch CSR, passphrase, and key.
-keysize 1024 | 2048
Specifies the size of the key. Valid values are 1024 or 2048. bits. The greater the
value, the more secure is the connection; however, performance degrades with
size.
delete
Deletes the specified certificate. Specify one of the following operands:
-ldapcacert
Deletes all LDAP CA certificates. You must specify a file name when deleting the
LDAP CA certificates. All LDAP certificates are concatenated in a single file. Use
show -ldapcacert to list that file name on the switch. You cannot delete an
individual certificate.
-fcapcacert
Deletes the FCAP CA certificate.
-fcapswcert
Deletes the FCAP SW certificate.
-fcapall
Deletes all FCAP objects including the switch CSR, keys, pass phrase, Root CA
certificate, and switch certificate.
-nowarn
Deletes the specified file without confirmation. This operand is optional.
export
Exports a CSR to a host. This command is typically used to submit a CSR to the
Certification Authority (CA) that issues the certificate. The following operands are
optional; if omitted, the command prompts interactively for your input.
-ldapcacert -certname certificate name
Exports an LDAP CA certificate from the switch to a remote host. You must
specify the name of the LDAP CA certificate to be exported. Use the show option
for a list of existing certificates.
-fcapswcert
Exports the FCAP switch certificate from the switch to the remote host. The
certificate is exported with the same filename it had when it was imported.