Brocade Virtual ADX Security Guide (Supporting ADX v03.1.00) - Manual (Page 116)

104 Brocade Virtual ADX Security Guide
53-1003250-01
Configuring SSL on a Brocade Virtual ADX
6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
NOTE
When the CA certificate has some text before the actual .PEM format of the certificate begins, the
upload to the Brocade Virtual ADX will fail. To ensure the certificate gets uploaded, remove any text
portion prior to the certificate start
----BEGIN CERTIFICATE-----.
Syntax: ssl gencsr key-name
The key-name variable is the key name that you want to use for the certificate request.
Exporting web server certificates
You can export a web server certificate from a web server and install it on a Brocade Virtual ADX.
This section describes the procedures required to export web server certificates from a Windows
Internet Information server (IIS), or and Apache server (UNIX).
Windows IIS
To export an existing Web server certificate to install on a Brocade Virtual ADX, follow these steps:
1. In the Run dialog box, type mmc, and click OK. The Microsoft Management Console (MMC)
appears.
2. If you do not have Certificate Manager installed in MMC, you need to install it. For more
information on how to add the certificate snap-in to an MMC console, see the Microsoft link:
Install a Server Certificate.
3. In the console tree, click the logical store where the certificate you want to export exists. It is
usually in the Certificates folder in the Personal directory under Certificates (local computer)
on the console root.
4. Right-click the certificate you want to export and click All Tasks > Export to start the Certificate
Export Wizard.
5. Click Next.
6. On Export Private Key, click Yes to export the private key.
You must export the private key with your certificate for it to be valid on your target server.
Otherwise, you must request a new certificate for the target server.