Dell PowerSwitch S4128F-ON EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 1033

Usage information Before using the crypto cert install command, copy a CA-signed certificate to the home directory on the switch using a secure connection, such as HTTPS, SCP, or SFTP, and (optionally) the private key. To delete a trusted certificate, use the crypto cert delete command. A successful installation of a trusted certificate requires that: • The downloaded certificate is correctly formatted. • The downloaded certificate's public key corresponds to the private key. You can assign an installed certificate-key pair to a security profile by entering the file name of the certificate without an extension. It is possible to store a certificate in either FIPS mode or non-FIPS mode on the switch, but not in both modes, using the crypto cert install command and the optional fips option. You must ensure that certificates installed in FIPS mode are compliant with the FIPS 140-2 standard. Example OS10# crypto cert install cert-file home://Dell_host1_CA1.pem key-file home://Dell_host1_CA1.key Processing certificate ... Certificate and keys were successfully installed as "Dell_host1_CA1.pem" that may be used in a security profile. CN = Dell_host1_CA1. Supported releases 10.4.3.0 or later crypto crl delete Deletes a Certificate Revocation List file in the trust store on the switch. Syntax Parameters crypto crl delete crl-filename • crl-filename - Enter a CRL filename with the .pem extension as displayed under Manually installed CRLs in show crypto crl output. Default Not configured Command Mode EXEC Usage Information The crypto crl delete command deletes only manually installed CRLs. Before you delete a CRL, use the show crypto crl command to display a list of all CRLs installed on the switch. Example OS10# crypto crl delete COMODO_Certification_Authority.0.crl.pem Supported Releases 10.5.0 or later crypto crl install Installs the Certificate Revocation List files that you copied to the switch. Syntax Parameters crypto crl install crl-path [crl-filename] • crl-path - Enter the path to the directory where the CRL is downloaded. • crl-filename - (Optional) Enter the CRL filename that you copied to the switch. Default Not configured Command Mode EXEC Usage Information Before you use the crypto crl install command, copy a CRL to the home:// or usb:// directory. If you do not enter a CRL filename in the command, you can copy and paste it when prompted. Use the show crypto crl command to view the CRLs that are already installed on the switch. In the show output, the CRLs displayed under Manually installed CRLs are installed using the crypto crl install command. Example OS10# copy scp:///[email protected]:/crl_example_file.pem home:// password: Security 1033