Operation Manual

Cryptography Commands

Mobility System Software Command Reference Guide

Version 7.3

16 – 410

crypto ca-certificate

Installs a certificate authority’s own PKCS #7 certificate into the MX certificate and key storage

area.

Syntax

crypto ca-certificate {admin | eap | web} PEM-formatted-certificate

Defaults

None.

Access

Enabled.

History

Usage

The Privacy-Enhanced Mail protocol (PEM) format is used for representing a PKCS #7

certificate in ASCII text. PEM uses base64 encoding to convert the certificate to ASCII text, then

puts the encoded text between the following delimiters:

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

To use this command, you must already have obtained a copy of the certificate from the certificate

authority as a PKCS #7 object file. Then do the following:

1. Open the PKCS #7 object file with an ASCII text editor such as Notepad or vi.

2. Enter the crypto ca-certificate command on the CLI command line.

3. When MSS prompts for the PEM-formatted certificate, paste the PKCS #7 object file onto the

command line.

Examples

The following command adds the certificate from the certificate authority to MX

certificate and key storage:

MX# crypto ca-certificate admin

Enter PEM-encoded certificate

-----BEGIN CERTIFICATE-----

MIIDwDCCA2qgAwIBAgIQL2jvuu4PO5FAQCyewU3ojANBgkqhkiG9wOBAQUFADCB

mzerMClaweVQQTTooewi\wpoer0QWNFNkj90044mbdrl1277SWQ8G7DiwYUtrqoQplKJvxz

.....

Lm8wmVYxP56M;CUAm908C2foYgOY40=

-----END CERTIFICATE-----