Users Guide

This will replace the already installed host certificate.
Do you want to proceed ? [yes/no(default)]:yes
Processing certificate ...
Host certificate installed successfully.
3. Congure an X.509v3 security prole.
OS10# show crypto cert
-------------------------------------
| Installed non-FIPS certificates |
-------------------------------------
s4048-001
-------------------------------------
| Installed FIPS certificates |
-------------------------------------
OS10# config terminal
OS10(config)# crypto security-profile secure-cluster
OS10(config-sec-profile)# certificate s4048-001
OS10(config-sec-profile)# exit
4. Congure the cluster security prole
OS10(config)# cluster security-profile secure-cluster
OS10(config)# exit
X.509v3 commands
certicate
Congures a certicate and private key pair in an application-specic security prole.
Syntax
certificate certificate-name
Parameters certicate-name — Enter the name of the certicate-key pair as it appears in the show crypto certs output
without the .pem extension.
Default Not congured
Command mode SEC-PROFILE
Usage information
Use the certificate command to associate a certicate and private key with a security prole. An application-
specic security prole allows you to change the certicate-key pair used by an OS10 application, such as
SmartFabric services, without interrupting the service of other mission-critical applications.
When you install a certicate-key pair, both take the name of the certicate. Enter the certicate-key pair name
without an extension as the
certificate-name value. The no form of the command removes the certicate-
key pair from the prole.
Example
OS10# crypto security-profile secure-radius-profile
OS10(config-sec-profile)# certificate Dell_host1
Supported releases 10.4.3.0 or later
Security 987