HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 277

Chapter 4 C Commands crypto ca export Send documentation comments to [email protected] crypto ca export To export the RSA key pair and the associated certificates (identity and CA) of a trust point within a Public-Key Cryptography Standards (PKCS) #12 format file to a specified location, use the crypto ca export command in configuration mode. crypto ca export trustpoint-label pkcs12 destination-file-url pkcs12-password Syntax Description trustpoint-label pkcs12 destination-file-url pkcs12-password Specifies the name of the trust point. The maximum size is 64 characters. Specifies a destination file in bootflash:filename format. The maximum size is 512 characters. Specifies the password to be used to protect the RSA private key inthe exported file. The maximum size is 64 characters. Defaults None. Command Modes Configuration mode. Command History Release 3.0(1) Modification This command was introduced. Usage Guidelines You can export the identity certificate along with the associated RSA key pair and CA certificate (or certificate chain) to a PKCS #12 format file for backup purposes. You can later import the certificate and RSA key pair to recover from a system crash on your switch. Examples The following example shows how to export a certificate and key pair in PKCS #12 format. switch# config terminal switch(config)# crypto ca export admin-ca pkcs12 bootflash:adminid.p12 nbv123 Related Commands Command crypto ca import trustpoint-label certificate crypto ca import trustpoint-label pkcs12 crypto key generate rsa Description Imports the identity certificate obtained from the CA to the trust point. Imports the identity certificate and associated RSA key pair and CA certificate (chain) to a trust point. Generates an RSA key pair. OL-16217-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family Command Reference 4-123