HP Cisco Nexus 5000 Cisco MDS 9000 Family CLI Configuration Guide - Release 4. - Page 876

Configuring CAs and Digital Certificates Chapter 36 Configuring Certificate Authorities and Digital Certificates Send documentation comments to [email protected] • Generating Certificate Requests, page 36-10 • Installing Identity Certificates, page 36-11 • Ensuring Trust Point Configurations Persist Across Reboots, page 36-12 • Monitoring and Maintaining CA and Certificates Configuration, page 36-13 Configuring the Host Name and IP Domain Name You must configure the host name and IP domain name of the switch if they are not already configured. This is required because switch FQDN is used as the subject in the identity certificate. Also, the switch FQDN is used as a default key label when none is specified during key-pair generation. For example, a certificate named SwitchA.example.com is based on a switch host name of SwitchA and a switch IP domain name of example.com. Caution Changing the host name or IP domain name after generating the certificate can invalidate the certificate. To configure the host name and IP domain name of the switch, follow these steps: Step 1 Step 2 Step 3 Command Purpose switch# config terminal switch(config)# Enters configuration mode. switch(config)# hostname SwitchA Configures the host name (SwitchA) of the switch. SwitchA(config)# ip domain-name example.com Configures the IP domain name (example.com) of the switch. Generating an RSA Key-Pair RSA key-pairs are used to sign and/or encrypt and decrypt the security payload during security protocol exchanges for applications such as IKE/IPsec and SSH, and they are required before you can obtain a certificate for your switch. 36-6 Cisco MDS 9000 Family CLI Configuration Guide OL-18084-01, Cisco MDS NX-OS Release 4.x