User Guide

394 Managing Keys and Certificates
320657-A
Creating Self-Signed Certificates
To manage the security of the WSS switch for administrative access by WLAN Management Software and Web View,
and the security of communication with 802.1X users and Web AAA users, create Admin, EAP, and Web AAA
public-private key pairs and self-signed certificates. Follow these steps:
1 Set time and date parameters, if not already set. (See “Configuring and Managing Time Parameters” on
page 136.)
2 Generate public-private key pairs:
23x0# crypto generate key admin 1024
key pair generated
23x0# crypto generate key eap 1024
key pair generated
23x0# crypto generate key webaaa 1024
key pair generated
3 Generate self-signed certificates:
23x0# crypto generate self-signed admin
Country Name: US
State Name: CA
Locality Name: San Francisco
Organizational Name: example
Organizational Unit: IT
Common Name: WSS 6
Email Address: [e-mail]
Unstructured Name: WSS in wiring closet 4
Self-signed cert for admin is
-----BEGIN CERTIFICATE-----
MIICUzCCAbygAwIBAgICA+cwDQYJKoZIhvcNAQEEBQAwNjELMAkGA1UEBhMCVVW
SS
CzAJBgNVBAgTAkNBMRowGAYDVQQDFBF0ZWNocHVic0B0cnB6LmNvbTAeFw0wMzA
0
...
Lm8wmVYLxP56APCUAm9O8C2foYgOY40=
-----END CERTIFICATE-----23x0# crypto generate self-signed eap
Country Name: US
State Name: CA
Locality Name: San Francisco
Organizational Name: example
Organizational Unit: IT
Common Name: WSS 6
Email Address: [e-mail]
Unstructured Name: WSS in wiring closet 4
Self-signed cert for eap is
-----BEGIN CERTIFICATE-----