Specifications

3-56
Cisco Wide Area Application Services Command Reference
OL-21611-01
Chapter 3 CLI Commands
crypto generate
crypto generate
To generate a self-signed certificate or a certificate signing request, use the crypt generate EXEC
command.
crypto generate {csr rsa modulus {1024 | 1536 | 2048 | 512 | 768}{disk pathname | ftp address |
sftp address | terminal | tftp address} | self-signed-cert filename [exportable] rsa modulus
{1024 | 1536 | 2048 | 512 | 768}}
Syntax Description
Defaults No default behavior or values.
Command Modes EXEC
Device Modes application-accelerator
central-manager
Examples The following example shows how to create an exportable self-signed certificate. The certificate file is
named myfile.p12 and is created using a 512-bit RSA modulus.
WAE# crypto generate self-signed-cert myfile.p12 exportable rsa modulus 512
Generating a 512 bit RSA private key
..........++++++++++++
...++++++++++++
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
csr Generate a certificate signing request (CSR).
rsa modulus Specify the size of the RSA modulus to be used for the CSR.
1024 | 1536 | 2048 | 512
| 768
The size (number of bits) used for the RSA modulus.
disk pathname Generate the file to a disk. Type the disk filename including the full path.
ftp address Generate the file to FTP. Type the FTP server’s IP address or hostname.
sftp address Generate the file to secure FTP. Type the secure FTP server’s IP address or
hostname.
terminal Generate the file to a terminal.
tftp address Generate the file to TFTP. Type the TFTP server’s IP address or hostname.
self-signed-cert
filename
Generate a self-signed SSL encryption certificate. The filename of the
self-signed certificate to be generated must have the .p12 file extension.
exportable Allows the self-signed certificate to be exported.
rsa modulus Specify the size of the RSA modulus to be used when generating the
self-signed certificate.