Brocade Fabric OS Command Reference Manual (53-1000240-01, November 2006)

2-552 Fabric OS Command Reference Manual
Publication Number: 53-1000240-01
secCertUtil
2
Note: Enter commands in lowercase only; mixed case is for readability.
secCertUtil
Manages third-party PKI-based certificates in the switch.
Synopsis seccertutil
Description Use this command to manage third-party certificates in the switch, as follows:
• Generate a public/private key pair.
• Generate a certificate signing request (CSR).
• Delete a CSR.
• List the certificates present in the switch.
• Display the contents of a certificate/CSR.
• Delete a specific certificate.
• Configure SSL certificate file name.
• Enable secure protocols.
The following is the usage statement for the utility:
seccertutil delcsr Delete CSR
seccertutil delete file name
Delete certificate
seccertutil export Export CSR
seccertutil genkey Generate a new public/private key pair
seccertutil gencsr Generate a new CSR
seccertutil import [-config cacert] | [-config swcert [-enable https]]
import Import certificate
-config swcert
Configure SSL certificate filename (optional)
-config cacert
Configure CA certificate filename (optional)
-enable https
Enable secure https (optional)
seccertutil showcsr Display CSR contents
seccertutil show List certificates
seccertutil show file name
Display certificate content
Operands The operands are as follows:
genkey Generates a public/private key pair. This is the first step for setting up third-party
certificates. The key length can be either 1,024 or 2,048 bits long. The greater the
length of the key, the more secure is the connection; however, the performance
goes down. The keys are generated only after deleting existing CSR and all other