Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 53)

Brocade Mobility RFS Controller CLI Reference Guide 35
53-1003098-01
2
crypto pki export request [generate-rsa-key|use-rsa-key] <RSA-KEYPAIR-NAME>
subject-name <COUNTRY> <STATE> <CITY> <ORGANIZATION> <ORGANIZATION-UNIT>
(<EXPORT-TO-URL>,email <SEND-TO-EMAIL>,fqdn <FQDN>,ip-address <IP>)
crypto pki export trustpoint <TRUSTPOINT-NAME> <EXPORT-TO-URL>
{background {on <DEVICE-NAME>}|on <DEVICE-NAME>|passphrase <KEY-PASSPHRASE>
background {on <DEVICE-NAME>}|on <DEVICE-NAME>}}
pki Enables PKI management. Use this command to authenticate, export, generate, or delete a trustpoint and
its associated CA certificates.
export request Exports CSR to the CA for a digital identity certificate.The CSR contains applicant’s details and RSA
Keypair’s public key.
[generate-rsa-key|
use-rsa-key]
<RSA-KEYPAIR-NAME> Generates a new RSA Keypair or uses an existing RSA Keypair
•
generate-rsa-key – Generates a new RSA Keypair for digital authentication
•
use-rsa-key – Uses an existing RSA Keypair for digital authentication
•
<RSA-KEYPAIR-NAME> – If generating a new RSA Keypair, specify a name for it. If
using an existing RSA Keypair, specify its name.
subject-name
<COMMON-NAME> Specifies subject name to identify the certificate
•
<COMMON-NAME> – Sets the common name used with the CA certificate. The name should enable
you to identify the certificate easily (2 to 64 characters in length).
<COUNTRY> Sets the deployment country code (2 character ISO code)
<STATE> Sets the state name (2 to 64 characters in length)
<CITY> Sets the city name (2 to 64 characters in length)
<ORGANIZATION> Sets the organization name (2 to 64 characters in length)
<ORGANIZATION-UNIT> Sets the organization unit (2 to 64 characters in length)
<EXPORT-TO-URL>
{background
{on <DEVICE-NAME}|
on <DEVICE-NAME>} Specify the CA’s location in the following format:
tftp://<hostname|IP>[:port]/path/file
ftp://<user>:<passwd>@<hostname|IP>[:port]/path/file
sftp://<user>@<hostname|IP>[:port]>/path/file
http://<hostname|IP>[:port]/path/file
cf:/path/file
usb<n>:/path/file
NOTE: The CSR is exported to the specified location.
•
background – Optional. Performs export operation in the background
•
on <DEVICE-NAME> – Optional. Performs export operation on a specific device
•
<DEVICE-NAME> – Specify the name of the AP, wireless controller, or service platform.
email
<SEND-TO-EMAIL> Exports CSR to a specified e-mail address
•
<SEND-TO-EMAIL> – Specify the CA’s e-mail address.
fqdn <FQDN> Exports CSR to a specified FQDN
•
<FQDN> – Specify the CA’s FQDN.
ip address <IP> Exports CSR to a specified device or system
•
<IP> – Specify the CA’s IP address.
pki Enables PKI management. Use this command to authenticate, export, generate, or delete a trustpoint and
its associated CA certificates.
export trustpoint
<TRUSTPOINT-NAME> Exports a trustpoint along with CA certificate, Certificate Revocation List (CRL), server certificate, and
private key
•
<TRUSTPOINT-NAME> – Specify the trustpoint name.