Installation guide

Switch Security
6-86
6.10 Creating Server Certificates
Use the Server Certificates screen to view existing self-signed certificate values. The values displayed are
read-only. The Server Certificates screen also allows an administrator to:
• create a certificate request
• send it to a Certificate Authority (CA)
• create a self signed certificate
• upload an external certificate
• delete a server certificate and/or root certificate of a trustpoint
• create a new key
• upload/download keys to and from the switch to and from a server or local disk
• delete all the keys in the switch.
Server certificates are issued to Web Servers and used to authenticate Web Servers to browsers while
establishing a Secure Socket Layer (SSL) connection.
The Server Certificates screen displays two tabs supporting the following:
• Using Trustpoints to Configure Certificates
• Configuring Trustpoint Associated Keys
6.10.1 Using Trustpoints to Configure Certificates
Each certificate is digitally signed by a trustpoint. The trustpoint signing the certificate can be a certificate
authority, corporation or individual. A trustpoint represents a CA/identity pair containing the identity of the CA,
CA-specific configuration parameters, and an association with an enrolled identity certificate.
To view current certificates values:
1. Select Security > Server Certificates from the main menu tree.