Connectivity Guide

Example
OS10# crypto security-profile secure-radius-profile
OS10(config-sec-profile)# certificate Dell_host1
Supported
releases
10.4.3.0 or later
cluster security-profile
Creates a security profile for a cluster application.
Syntax
cluster security-profile profile-name
Parameters profile-name — Enter the name of the security profile, up to 32 characters.
Default Not configured
Command mode CONFIGURATION
Usage
information
When you enable VLT or a fabric automation application, switches that participate in the cluster use
secure channels to communicate with each other. OS10 installs a default X.509v3 certificate-key pair
that is used to establish secure channels between peer devices in a cluster. If untrusted devices access
the management or data ports on the switch, you should replace the default certificate-key pair with
a custom X.509v3 certificate-key pair using the cluster security-profile command. A security
profile associates a certificate and private key pair using the certificate command. The no form of
the command deletes the cluster security profile.
Example
OS10(config)# cluster security-profile secure-cluster
OS10(config)#
Supported
releases
10.4.3.0 or later
crypto ca-cert delete
Deletes a CA certificate.
Syntax
crypto ca-cert delete {ca-cert-filepath | all}
Parameters
● ca-cert-filepath — Enter the local path where the downloaded CA certificate is stored; for
example, home://CAcert.pem or usb://CA-cert.pem.
● all — Delete all CA certificates.
Default Not configured
Command mode EXEC
Usage
information
To display the currently installed CA certificates, use the show crypto ca-certs command.
Example
OS10# crypto ca-cert delete Amazon_Root_CA.crt
Successfully removed certificate
OS10# crypto ca-cert delete all
Proceed to delete all installed CA certificates? [confirm yes/
no(default)]:yes
Supported
releases
10.4.3.0 or later
Security 801