Specifications

DGS-3048 Layer 2 Switch CLI Reference Manual
152
crypto certificate generate
Purpose Used to generate a self-signed HTTPS certificate
Syntax
Crypto certificate generate<number 1-2> generate {key-
generate <length 512 - 2048>| cn <common- name 1 - 64>| ou
<organization-unit 1 - 64>| or<organization 1 - 64>| loc <location
1 - 64>| st <state 1 - 64>| cu <country 1-2>| duration <days 30-
3650>
Description This command allow administrator to generate a self-signed HTTPS
certificate for device.
Parameters
number — Specifies the certificate number. (Range: 1 - 2)
key-generate — Regenerate the SSL RSA key.
length — Specifies the SSL RSA key length. (Range: 512 - 2048)
common- name — Specifies the fully qualified URL or IP address of the
device.
(Range: 1 - 64)
organization — Specifies the organization name. (Range: 1 - 64)
organization-unit — Specifies the organization-unit or department
name.(Range: 1 - 64)
location — Specifies the location or city name. (Range: 1 - 64)
state — Specifies the state or province name. (Range: 1 - 64)
country — Specifies the country name. (Range: 2 - 2)
days — Specifies number of days certification is valid. (Range: 30 -
3650)
Restrictions Only administrator-level users can issue this command.
Usage Example:
To generate a self-signed HTTPS certificate:
DGS3048# crypto certificate 1 generate
Success.
DGS3048#
crypto certificate
Purpose Used to generates and displays certificate requests for HTTPS.
Syntax
crypto certificate <number 1-2> request {cn <common- name 1 -
64> | ou <organization-unit 1 - 64>| or <organization 1 - 64> | loc
<location 1 - 64> | st<state 1 - 64>| cu <country 1-2>
Description
Use this command to export a certificate request to a Certification Authority.
The certificate request is generated in Base64-encoded X.509 format.
Before generating a certificate request you must first generate a self-signed
certificate using the crypto certificate generate Global Configuration mode
command. Be aware that you have to reenter the certificate fields. After
receiving the certificate from the Certification Authority, use the crypto
certificate import Global Configuration mode command to import the
certificate into the device. This certificate replaces the self-signed