User guide

Chapter 11: Command Line Interface
211
Certificate Command Menu
The certificate command menu provides the client and server commands
to create and manage security certificates.
Note: If the SX is not used to generate the certificate signing request and
an external certificate is used instead, encryption needs to be removed
from the private key before installing it on the SX. If this is the case, to
remove the encryption from the key, a command such as openssl rsa -in
server.key -out server2.key and server2.key should be used. Encrypted
private keys are used to prevent the web server from being started by
unauthorized users. Since SX does not allow users to access the web
server directly, encrypted private keys are not required and does not
compromise security.
Note: When the SX is used to generate the certificate signing request,
the private key is not required since SX keeps the private key exclusive.
Syntax
certificate <>
Note: For a description of how to enable LDAP over SSL with a third-
party certification authority, see
http://support.microsoft.com/default.aspx?scid=kb;en-us;321051. The
document requires the exchange of certificate of authority created by the
MS Server.
certificate
Command
Description
add
Install a User Certificate
addcrl
Install a CA's CRL
clientcert
Activate Client Side Certificate Verification
delete
Remove Client CA Certificate
deletecrl
Remove Client CA's CRL
viewcacert
View Client CA Certificate
viewcrl
View Client CA CRL Certificate