Brocade Communications Systems ServerIron ADX 12.4.00a - Manual (Page 165)

ServerIron ADX Security Guide 151
53-1002440-03
Configuring SSL on a ServerIron ADX
6
After transferring the file, it can be used both as a key and a certificate. To add the certificate file
and keys to the profile, use the following commands:
ServerIronADX(config-ssl-profile-mysslprofile)# keypair-file mypkcsfile
ServerIronADX(config-ssl-profile-mysslprofile)# certificate-file mypkcsfile
The show ssl cert command can be used to display a pkcs file. The show ssl key command does not
display a pkcs file, but it does contain a keypair.
Creating a Master Password for export of SSL keys
You can create a master password that grants permission to export all SSL keys on a ServerIron
ADX using SCP copy. This password is used with the "scp <key-pair-file-name>
<user>@<SI_IP_Addr>: sslkeypair:<filename-on-SI>:<password>: <format>" command. If a master
password is not configured, a separate password associated with each key must be used.
To define a master password for the export of SSL keys, use the following command.
ServerIronADX# ssl set export-master-pswd exportpw
Syntax: ssl set export-master-pswd <password>
The <password> variable specifies the master password for export of SSL keys. It can be from 1 to
24 characters in length.
To disable a master password for export of SSL keys, use the following command.
ServerIronADX# ssl clear export-master-pswd exportpw
Syntax: ssl clear export-master-pswd <password>
The <password> variable specifies the master password for export of SSL keys that you want to
remove.
Use the following command to display whether a master password is in effect.
ServerIronADX# show ssl key *
master-password enable
ssl key files:
1 : key-test
2 : key1
3 : keyz
4 : keyc
5 : key7
Syntax: show ssl key *
Deleting certificate and key files
You can use the following commands to delete a specified certificate or key file as shown.
ServerIronADX# ssl clear certfile <certfile-name>
Syntax: ssl clear certfile <certfile-name>
The <certfile-name> variable specifies the certificate that you want to delete.
ServerIronADX# ssl clear keyfile <keyfile-name>
Syntax: ssl clear certfile <keyfile-name>
The <keyfile-name> variable specifies the key that you want to delete.