Manualshelf

Connectivity Guide

ManualsBrandsDell ManualsAccess PlatformsSmartFabric OS10 Documentation
801802803804805806807808809810
Table Of Contents
crypto ca-cert install
Installs a certificate from a Certificate Authority that is copied to the switch.
Syntax
crypto ca-cert install ca-cet-filepath [filename]
Parameters
● ca-cert-filepath — Enter the local path where the downloaded CA certificate is stored; for
example, home://CAcert.pem or usb://CA-cert.pem.
● filename — (Optional) Enter the filename that the CA certificate is stored under in the OS10 trust
store directory. Enter the filename in the filename.crt format.
Default Not configured
Command mode EXEC
Usage
information
Before using the crypto ca-cert install command, copy the certificate to the home directory on
the switch using a secure connection, such as HTTPS, SCP, or SFTP. After successful installation, the
subject and issuer of the CA certificate are displayed. To delete a trusted certificate, use the crypto
ca-cert delete command.
Example
OS10# crypto ca-cert install home://GeoTrust_Universal_CA.crt
Processing certificate ...
Installed Root CA certificate
CommonName = GeoTrust Universal CA
IssuerName = GeoTrust Universal CA
Supported
releases
10.4.3.0 or later
crypto cert delete
Deletes an installed host certificate and the private key created with it.
Syntax
crypto cert delete filename [fips]
Parameters
● filename — Enter the file name of the host certificate as displayed in the show crypto cert
command.
● fips — (Optional) Delete a FIPS-compliant certificate-key pair. To verify whether a certificate is
non-FIPS or FIPS-compliant., enter the show crypto cert command.
Default Not configured
Command mode EXEC
Usage
information
When you delete the system's certificate, you also delete the private key. Do not delete a host certificate
that is used in a security profile. To display the currently installed host certificate and associated key, use
the show crypto cert command.
NOTE: A FIPS-compliant and non-FIPS certificate may have the same file name. To delete a FIPS-
compliant certificate, you must enter the fips parameter in the command.
Example
OS10# crypto cert delete Dell_host1_CA1.pem
Certificate and keys were successfully deleted. CN = Dell_host1_CA1
Supported
releases
10.4.3.0 or later
crypto cert generate
Creates a certificate signing request (CSR) or a self-signed certificate.
Syntax
crypto cert generate {request | self-signed} [cert-file cert-path key-file
{private | keypath}] [country 2-letter code] [state state] [locality city]
802 Security