Users Guide

Default Not congured
Command mode SEC-PROFILE
Usage information
Use the peer-name-check command to enable an OS10 application to verify that the certicate used to
connect to the switch matches the name of the peer device, such as a remote server name. The no version of the
command disables peer name checking in the security prole.
Example
OS10(config)# crypto security-profile profile-1
OS10(config-sec-profile)# peer-name-check
OS10(config)# crypto security-profile profile-1
OS10(config-sec-profile)# no peer-name-check
Supported releases 10.5.0.0 or later
revocation-check
Enables CRL checking in a security prole.
Syntax
revocation-check
Parameters None
Default Not congured
Command mode SEC-PROFILE
Usage information
Use the revocation-check command to enable the verication of certicates presented by external devices
for a PKI-enablled application on the switch. Use the show crypto crl command to display the CRLs installed
on the switch and used to ensure the validity and trustworthiness of certicates from external devices. The no
version of the command disables CRL checking in a security prole.
Example
OS10(config)# crypto security-profile profile-1
OS10(config-sec-profile)# revocation-check
OS10(config)# crypto security-profile profile-1
OS10(config-sec-profile)# no revocation-check
Supported releases 10.5.0.0 or later
show crypto ca-certs
Displays all CA certicates installed on the switch.
Syntax
show crypto ca-certs [filename]
Parameters filename — (Optional) Enter the text lename of a CA certicate as shown in the show crypto ca-certs
output. Enter the lename in the format filename.crt.
Default Display all installed CA certicates.
Command mode EXEC
Usage information To delete a CA certicate, use the crypto ca-cert delete command. Enter the lename as shown in the
show crypto ca-certs output.
Security 995