Dell PowerSwitch S4128F-ON OS10 Enterprise Edition User Guide Release 10.4.3.0 - Page 843

Command mode Usage information EXEC Before using the crypto cert install command, copy a CA-signed certificate to the home directory on the switch using a secure connection, such as HTTPS, SCP, or SFTP, and (optionally) the private key. To delete a trusted certificate, use the crypto cert delete command. A successful installation of a trusted certificate requires that: • The downloaded certificate is correctly formatted. • The downloaded certificate's public key corresponds to the private key. You can assign an installed certificate-key pair to a security profile by entering the file name of the certificate without an extension. It is possible to store a certificate in either FIPS mode or non-FIPS mode on the switch, but not in both modes, using the crypto cert install command and the optional fips option. You must ensure that certificates installed in FIPS mode are compliant with the FIPS 140-2 standard. Example OS10# crypto cert install cert-file home://Dell_host1_CA1.pem key-file home:// Dell_host1_CA1.key Processing certificate ... Certificate and keys were successfully installed as "Dell_host1_CA1.pem" that may be used in a security profile. CN = Dell_host1_CA1. Supported releases 10.4.3.0 or later crypto security-profile Creates an application-specific security profile. Syntax crypto security-profile profile-name Parameters profile-name - Enter the name of the security profile, up to 32 characters. Default Not configured Command mode CONFIGURATION Usage information Create a security profile for a specific application on the switch, such as RADIUS over TLS. A security profile associates a certificate and private key pair using the certificate command. The no form of the command deletes the security profile. Example OS10# crypto security-profile secure-radius-profile OS10(config-sec-profile)# Supported releases 10.4.3.0 or later show crypto ca-certs Displays all CA certificates installed on the switch. Syntax Parameters Default Command mode show crypto ca-certs [filename] filename - (Optional) Enter the text filename of a CA certificate as shown in the show crypto ca-certs output. Enter the filename in the format filename.crt. Display all installed CA certificates. EXEC Security 843