Specifications

2-17
Cisco Global Site Selector Administration Guide
OL-5480-01
Chapter 2 Managing the GSS from the CLI
Modifying the Attributes of the Security Certificate on the GSSM
Modifying the Attributes of the Security Certificate
on the GSSM
You can customize the attributes of the security certificate issued by Cisco
Systems and installed on the primary GSSM (as described in the
“Logging Into
the Primary GSSM Graphical User Interface” section in Chapter 1, Managing
GSS Devices from the GUI). By using the certificate set-attributes CLI
command, you can modify the X.509 fields, extensions, and properties included
on the security certificate. The attribute changes that you make affect the fields on
the Details tab of the certificate. To return the attributes for the security certificate
to the default settings, use the no form of the certificate set-attributes command.
When you enter the certificate set-attributes command, the GSS software
displays a series of prompts related to the fields on the certificate. Proceed though
all of the prompts and make changes only to those fields that you want to modify.
When completed, the software prompts you to save your changes and generate a
a new certificate. The next time you access the primary GSSM GUI, the Security
Alert dialog box reappears informing you that the certificate is invalid. At that
point you can either reinstall the updated certificate or close the dialog box and
continue with primary GSSM GUI operation.
To modify the attributes of a security certificate on the primary GSSM:
1. Log in to the CLI and enable privileged EXEC mode.
gssm1.example.com> enable
gssm1.example.com#
2. Enter the gss stop command to stop the GSS software. Modifications to the
certificate cannot occur while the GUI is active on the primary GSSM.
gssm1.example.com# stop
3. Access global configuration mode on the device.
gssm1.example.com# config
gssm1.example.com(config)#