Specifications

21-12 topology Commands
PKCS#12file,CSRfile,orPEM/DERfiles,and,ifsuccessful,convertsthePKCS#12file,CSRfile,or
PEM/DERfilesintoacertificateandkey.Thecommandconfirmsthatthecert ificatepassword
workswiththeprivatekeyfilethenassignsboththecertificateandkeytothenamedtopology.
Usingthecert
commandwiththedefaultoptionremovesthecertificatefromthenamedtopology
andassignsthefactorydefaultcertificatetoit.
Examples
ThefollowingexampledownloadsaPKCS#12certificatefileandachaincertificateusingFTPand
appliesittothetopologynamedtest.
EWC.enterasys.com:topology:test:l3# cert pkcs12 ftp 1.1.1.1 test abc123 /test
test.pfx abc123 chain.crt
Attempting to download file using ftp ...
ThefollowingexampledownloadsaPEM/DERcertificatefile,aPEM/DERkeyfile,anda chain
certificateusingFTPandappliesittothetopologynamedtest.
EWC.enterasys.com:topology:test:l3# cert per-der ftp 1.1.1.1 test abc123 /test
t certificate.crt privatekey.key abc123 chain.crt
Attempting to download file using ftp ...
ThefollowingexampledownloadsaCSRfileusingFTPandappliesittothetopologynamedtest.
EWC.enterasys.com:topology:test:l3# cert csr-cert ftp 1.1.1.1 test abc123 /test
test.csr
Thefollowingexamplesetsthecertificatetothefactorydefaultforthetopologynamedtest.
EWC.enterasys.com:topology:test:l3# cert default
EWC.enterasys.com:topology:test:l3# show cert
Factory default certificate/key
21.4.3.3 copy-csr
Usethiscommandtouploadatopologycertificatesigningrequesttoaserver.Thecopy‐scr
commandisavailableinthetopology:<named‐topology>:l3context.
Syntax
copy-csr <scp|ftp> <server> <user> <password> <dir>
Parameters
Note: This command generates an error if the indicated file name cannot be found.
scp|ftp Specifiesthetypeofserver,FTPorSCP,towhichthefilewillbe
uploaded.
server IPaddressoftheFTPorSCPserver.
user Usernametologintotheserver.
password Userpassword.
dir Directoryonservertoputthecertificatesigningrequestfile.