Specifications

15-4 Cryptography Commands
crypto certificate
InstallsoneoftheRoamAboutswitch’sPKCS #7certificatesintothecertificateandkeystorage
areaontheRoamAbout.Thecertificate,whichisissuedandsignedbyacertificateauthority,
authenticatestheRoamAboutSwitcheithertoRASMorWebView,orto802.1Xsupplicants
(clients).
Syntax
crypto certificate {admin | eap | web} PEM-formatted certificate
Parameters
Defaults
None.
Mode
Enabled.
Usage
Tousethiscommand,youmustalreadyhavegeneratedacertificate requestwiththecrypto
generaterequestcommand,senttherequesttothecertificateauthority,andobtainedasigned
copyoftheRoamAboutcertificateasaPKCS #7objectfile.Thendothefollowing:
1. OpenthePKCS #7objectfilewithanASCII
texteditorsuchasNotepadorvi.
2. EnterthecryptocertificatecommandontheCLIcommandline.
3. WhenMSSprompts youforthePEM‐formattedcertificate,pastethePKCS #7objectfileonto
thecommandline.
TheRoamAboutSwitchverifiesthevalidityofthepublickeyassociatedwiththiscertificatebefore
installingit,
topreventamismatchbetweentheRoamAboutswitch’sprivatekeyandthepublic
keyintheinstalledcertificate.
admin Storesthecertificateauthority’sadministrativecertificate,which
authenticatestheRoamAbouttoRASMorWebView.
eap Storesthecertificateauthority’sExtensibleAuthenticationProtocol(EAP)
certificate,whichauthenticatestheRoamAboutto802.1Xsupplicants
(clients).
web Stores
thecertificateauthority’scertificate,whichauthenticatestheRASto
clientswhouseWebAuthentication
PEM‐formatted
certificate
ASCIItextrepresentationofthePKCS #7certifica te,consistingofupto
5120 characters,thatyouhaveobtainedfromthecertificateauthority.