Users Guide

X.509v3 commands
certificate
Configures a certificate and private key pair in an application-specific security profile.
Syntax
certificate certificate-name
Parameters certificate-name — Enter the name of the certificate-key pair as it appears in the show crypto certs output
without the .pem extension.
Default Not configured
Command mode SEC-PROFILE
Usage information
Use the certificate command to associate a certificate and private key with a security profile. An application-
specific security profile allows you to change the certificate-key pair used by an OS10 application, such as
SmartFabric services, without interrupting the service of other mission-critical applications.
When you install a certificate-key pair, both take the name of the certificate. Enter the certificate-key pair name
without an extension as the certificate-name value. To remove a certificate-key pair from the profile, enter
the no certificate command.
Example
OS10# crypto security-profile secure-radius-profile
OS10(config-sec-profile)# certificate Dell_host1
Supported
releases
10.4.3.0 or later
cluster security-profile
Creates a security profile for a cluster application.
Syntax
cluster security-profile profile-name
Parameters profile-name — Enter the name of the security profile; a maximum of 32 characters.
Default Not configured
Command mode CONFIGURATION
Usage information When you enable VLT or a fabric automation application, switches that participate in the cluster use secure
channels to communicate with each other. OS10 installs a default X.509v3 certificate-key pair to establish secure
channels between the peer devices in a cluster. If untrusted devices access the management or data ports on the
switch, replace the default certificate-key pair with a custom X.509v3 certificate-key pair using the cluster
security-profile command. A security profile associates a certificate and private key pair using the
certificate command. The no form of the command deletes the cluster security profile.
Example
OS10(config)# cluster security-profile secure-cluster
OS10(config)#
Supported
releases
10.4.3.0 or later
crypto ca-cert delete
Deletes a CA certificate.
Syntax
crypto ca-cert delete {ca-cert-filepath | all}
Parameters
• ca-cert-filepath — Enter the local path where the downloaded CA certificate is stored; for example,
home://CAcert.pem or usb://CA-cert.pem.
• all — Delete all CA certificates.
Default Not configured
976 Security