Operation Manual
Cryptography Commands
Cryptography Commands
16 – 415
Defaults
None.
Access
Enabled.
History
Usage
To use this command, you must already have generated a public-private encryption key
pair with the crypto generate key command.
Examples
To generate a self-signed administrative certificate, type the following command:
MX# crypto generate self-signed admin
Country Name:
State Name:
Locality Name:
Organizational Name:
Organizational Unit:
Common Name: mx1@example.com
Email Address:
Unstructured Name:
success: self-signed cert for admin generated
See Also
● crypto certificate on page 16-411
● crypto generate key on page 16-412
crypto otp
Sets a one-time password (OTP) for use with the crypto pkcs12 command.
Syntax
crypto otp {admin | eap | web} one-time-password
Common Name
string
Specify a unique name for the MX, in up to 80 alphanumeric characters with no
spaces. Use a fully qualified name if such names are supported on your network. This
field is required.
Note: If you are generating a WebAAA (web) certificate, use a common
name that looks like a domain name (two or more strings connected by dots,
with no spaces). For example, use common.name instead of common name.
The string is not required to be an actual domain name. It simply needs to
be formatted like one.
Email Address
string
(Optional) Specify your email address, in up to 80 alphanumeric characters with no
spaces.
Unstructured Name
string
(Optional) Specify any name, in up to 80 alphanumeric characters with no spaces.
Version 1.0 Command introduced
Version 3.0 webaaa option added
Version 4.1 webaaa option renamed to web
admin Creates a one-time password for installing a PKCS #12 object file for an
administrative certificate and key pair—and optionally the certificate
authority’s own certificate—to authenticate the MX switch to RingMaster or
Web View.
eap Creates a one-time password for installing a PKCS #12 object file for an EAP
certificate and key pair—and optionally the certificate authority’s own
certificate—to authenticate the MX switch to 802.1X supplicants (clients).