D-Link DWS-1008 Product Manual - Page 285

Key and Certificate Configuration Scenarios The first scenario shows how to generate self-signed certificates. The second scenario shows how to install CA-signed certificates using PKCS #12 object files, and the third scenario shows how to install CA-signed certificates using CSRs (PKCS #10 object files) and PKCS #7 object files. Creating Self-Signed Certificates To manage the security of the switch for administrative access by Web View, and the security of communication with 802.1X users and WebAAA users, create Admin, EAP, and WebAAA public-private key pairs and self-signed certificates. Follow these steps: 1. Set time and date parameters, if not already set. 2. Generate public-private key pairs: DWS-1008# crypto generate key admin 1024 key pair generated DWS-1008# crypto generate key eap 1024 key pair generated DWS-1008# crypto generate key web 1024 key pair generated 3. Generate self-signed certificates: DWS-1008# crypto generate self-signed admin Country Name: US State Name: CA Locality Name: San Francisco Organizational Name: example Organizational Unit: IT Common Name: DL 6 Email Address: [email protected] Unstructured Name: wiring closet 4 success: self-signed cert for admin generated DWS-1008# crypto generate self-signed eap Country Name: US State Name: CA Locality Name: San Francisco Organizational Name: example Organizational Unit: IT Common Name: DL 6 Email Address: [email protected] Unstructured Name: wiring closet 4 Self-signed cert for eap is success: self-signed cert for eap generated D-Link DWS-1008 User Manual 266