Specifications

3-54

Cisco Wide Area Application Services Command Reference

OL-21611-01

Chapter 3 CLI Commands

crypto export

To export SSL certificate and key files, use the crypto export EXEC command.

crypto export {ca-certificate filename | pkcs12 {factory-self-signed | admin | filename}

{pem-cert-key | pem-cert-only | pem-key-only | pkcs12}}{disk pathname | ftp address | sftp

address | terminal | tftp address}

Syntax Description

Defaults No default behavior or values.

Command Modes EXEC

Device Modes application-accelerator

Examples The following example shows how to export a CA certificate file named mycert.ca to an FTP server:

WAE# crypto export ca-certificate mycert.ca ftp 1.2.3.4 dir1 mycert.ca

The following example shows how to export the certificate and private key from a PKCS12 file named

myfile.p12 to a PEM file on the local1 directory on the hard drive:

WAE# crypto export pkcs12 myfile.p12 pkcs12 disk /local1/myfile.p12

Related Commands crypto delete

ca-certificate filename Export a certificate authority certificate file.

pkcs12 Export a PKCS12 format file. (PKCS12 files contain both the private

encryption key and the public key certificate.)

factory-self-signed Specifies that the SSL PKCS file is to be self-signed.

admin Specifies that the certificate and key are for the Central Manager admin

service. This option can be used only on the Central Manager.

filename The name of the PKCS12 file to be exported.

pem-cert-key Export both the certificate and key in PEM format.

pem-cert-only Export only the certificate in PEM format.

pem-key-only Export only the key in PEM format.

pkcs12 Export both the certificate and key in PKCS12 format.

disk pathname Export to a disk. Type the disk filename including the full path.

ftp address Export to FTP. Type the FTP server’s IP address or hostname.

sftp address Export to secure FTP. Type the secure FTP server’s IP address or hostname.

terminal Export to a terminal.(Not available for crypto export pkcs12.)

tftp address Export to TFTP. Type the TFTP server’s IP address or hostname.