HP StorageWorks 4/16 Brocade OS Command Reference Manual Supporting Fabric OS - Page 570

2 secCertUtil secCertUtil Manages third-party PKI-based certificates in the switch. Synopsis seccertutil Description Use this command to manage third-party certificates in the switch. This command also imports or exports Certificate Signing Requests from or to remote host using IPV6 addresses and IPV4 addresses. This command can be used to do the following: • Generate a public/private key pair. • Generate a certificate signing request (CSR). • Delete a CSR. • List the certificates present in the switch. • Display the contents of a certificate/CSR. • Delete a specific certificate. • Configure SSL certificate file name. • Enable secure protocols. Operands The following operands are supported: delcsr Delete CSR delete file name Delete certificate export Export CSR genkey Generates a public/private key pair. This is the first step for setting up third-party certificates. The key length can be either 1,024 or 2,048 bits long. The greater the length of the key, the more secure is the connection; however, the performance goes down. The keys are generated only after deleting existing CSR and all other certificates. delkey Delete public/private key pair. gencsr Generates a new CSR for the switch. This is second step for setting up third-party certificates in the switch. To generate a CSR, the admin must answer a series of questions prompted by this option. Once all questions are answered, a CSR is generated and placed in a file named ip_address.csr, where the ip_address is the IP address of the switch. import [-config cacert] | [-config swcert [-enable https]] Import a certificate. Use this command to download a certificate issued by a CA after sending the CSR to the CA. Set imported certificate with the -config option. -config swcert Configure SSL certificate filename (optional) -config cacert Configure CA certificate filename (optional) -enable https Enable secure https (optional) 544 Fabric OS Command Reference 53-1000599-01