HP Cisco Nexus 5000 Cisco MDS 9000 Family CLI Configuration Guide - Release 4. - Page 877

Chapter 36 Configuring Certificate Authorities and Digital Certificates Configuring CAs and Digital Certificates Send documentation comments to [email protected] To generate an RSA key-pair, follow these steps: Step 1 Step 2 Command switch# config terminal switch(config)# switch(config)# crypto key generate rsa Purpose Enters configuration mode. Generates an RSA key-pair with the switch FQDN as the default label and 512 as the default modulus. By default, the key is not exportable. Note The security policy (or requirement) at the local site (MDS switch) and at the CA (where enrollment is planned) are considered in deciding the appropriate key modulus. Note The maximum number of key-pairs you can configure on a switch is 16. switch(config)# crypto key generate rsa label SwitchA modulus 768 Generates an RSA key-pair with the label SwitchA and modulus 768. Valid modulus values are 512, 768, 1024, 1536, and 2048. By default, the key is not exportable. switch(config)# crypto key generate rsa exportable Generates an RSA key-pair with the switch FQDN as the default label and 512 as the default modulus. The key is exportable. Caution The exportability of a key-pair cannot be changed after key-pair generation. Note Only exportable key-pairs can be exported in PKCS#12 format. OL-18084-01, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family CLI Configuration Guide 36-7