Nortel Networks 5500 series User Manual

Page 317

Advertising
background image

Managing private keys and certificates

317

Step

Action

1

Access the Certificate menu by using the

/cfg/cert <cert

id>

command, where

<cert id>

is the certificate number of

the certificate you wish to copy.

To view basic information about all configured certificates, use
the

/info/certs

command.

2

Display the private key and certificate. Enter the following
command:

/cfg/cert #/display

3

When prompted, specify whether or not the key will be
encrypted. The default is

yes

.

4

When prompted, specify a password phrase if you wish to
password protect the private key. The password phrase must
contain at least four characters.

If you specify a password phrase, the password phrase must be
provided on all occasions in future when the private key file is
accessed (for example, when adding, importing, or exporting
private keys and certificates).

5

Copy the private key, certificate, or both, as required.

For the private key, ensure that you include the

-----BEGIN

RSA PRIVATE KEY-----

and

-----END RSA PRIVATE

KEY-----

lines.

For the certificate, ensure that you include the

-----BEGIN

CERTIFICATE-----

and

-----END CERTIFICATE-----

lines.

6

Paste the private key, certificate, or both into a text editor.

7

Save the file with a .PEM extension.

Figure 19 "Displaying a private key and certificate" (page
318)

shows sample output for the

/cfg/cert #/display

command. For more information about the Certificate menu
commands, see

“Managing and viewing certificates and keys”

(page 302)

.

Nortel Secure Network Access Switch

Using the Command Line Interface

NN47230-100

03.01

Standard

28 July 2008

Copyright © 2007, 2008 Nortel Networks

.

Advertising
This manual is related to the following products: