HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference Guide - Release 4.x - Page 926

rsakeypair Chapter 20 R Commands Send documentation comments to [email protected] rsakeypair To configure and associate the RSA key pair details to a trust point, use the rsakeypair command in trust point configuration submode. To disassociate the RSA key pair from the trust point, use the no form of the command. rsakeypair key-pair-label [key-pair-size] no rsakeypair key-pair-label [key-pair-size] Syntax Description key-pair-label key-pair-size Specifies a name for the RSA key pair. The maximum size is 64 characters. Specifies a size for the RSA key pair. The size can range from 512 to 2048. Defaults The default key pair size is 512 if the key pair is not already generated. Command Modes Trust point configuration submode. Command History Release 3.0(1) Modification This command was introduced. Usage Guidelines Only one RSA key pair can be associated with a trust point CA, even though the same key pair can be associated with many trust point CAs. This association must occur before enrolling with the CA to obtain an identity certificate. If the key pair had been generated previously (using the crypto key generate command), then the key pair size, if specified, should be the same as that was used during generation. If the specified key pair is not yet generated, it will be generated during enrollment using the crypto ca enroll command. The no form of the rsakeypair command disassociates (but never destroys) the key pair from the trust point. Before issuing the no rsakeypair command, first remove the identity certificate, if present, from the trust point C. Doing so ensures the consistency of the association between the identity certificate and the key pair for a trust point Examples The following example shows how to associate an RSA key pair to a trust point. switch# config terminal switch(config)# crypto ca trustpoint admin-ca switch(config-trustpoint)# rsakeypair adminid-key The following example shows how to disassociate an RSA key pair from a trust point. switch(config-trustpoint)# no rsakeypair adminid-key 20-36 Cisco MDS 9000 Family Command Reference OL-18089-01, Cisco MDS NX-OS Release 4.x