Allied Telesis AT-S63 - Manual (Page 493)

AT-S63 Management Software Command Line Interface User’s Guide
493
create pki certificate=Sw12cert keypair=4 serialnumber=0
subject="cn=149.11.11.11"
3. This command adds the new certificate to the certificate database. The
certificate is given a description of “Switch 12 certificate”:
add pki certificate="Switch 12 certificate"
location=Sw12cert.cer
4. This command disables the web server:
disable http server
5. This command configures the web server by activating HTTPS and
specifying the encryption key pair created in step 1:
set http server security=enabled sslkeyid=4
6. This command enables the web server:
enable http server
General Configuration Steps for a CA Certificate
Below are the steps to configuring the switch’s web server for CA
certificates using the command line commands. The steps explain how to
create an encryption key and a self-signed certificate, and how to
configure the web server for the certificate:
1. Set the switch’s date and time. You can do this manually using the
“SET DATE” on page 89 or you can configure the switch to obtain the
date and time from an SNTP server using “ADD SNTPSERVER
PEER|IPADDRESS” on page 84.
2. Create an encryption key pair using “CREATE ENCO KEY” on
page 498 (syntax 1).
3. Set the switch’s distinguished name using “SET SYSTEM
DISTINGUISHEDNAME” on page 518.
4. Create an enrollment request using “CREATE PKI
ENROLLMENTREQUEST” on page 511.
5. Upload the enrollment request from the switch to a management
station or FTP server using “UPLOAD” on page 179.
6. Submit the enrollment request to a CA.
7. After you have received the CA certificates, download them into the
switch’s file system using “LOAD” on page 166.