Dell PowerSwitch S5212F-ON EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 1029

cluster security-profile Creates a security profile for a cluster application. Syntax cluster security-profile profile-name Parameters profile-name - Enter the name of the security profile; a maximum of 32 characters. Default Not configured Command mode CONFIGURATION Usage information When you enable VLT or a fabric automation application, switches that participate in the cluster use secure channels to communicate with each other. OS10 installs a default X.509v3 certificate-key pair to establish secure channels between the peer devices in a cluster. If untrusted devices access the management or data ports on the switch, replace the default certificate-key pair with a custom X.509v3 certificate-key pair using the cluster security-profile command. A security profile associates a certificate and private key pair using the certificate command. The no form of the command deletes the cluster security profile. Example OS10(config)# cluster security-profile secure-cluster OS10(config)# Supported releases 10.4.3.0 or later crypto ca-cert delete Deletes a CA certificate. Syntax Parameters crypto ca-cert delete {ca-cert-filepath | all} • ca-cert-filepath - Enter the local path where the downloaded CA certificate is stored; for example, home://CAcert.pem or usb://CA-cert.pem. • all - Delete all CA certificates. Default Not configured Command mode EXEC Usage information To display the currently installed CA certificates, use the show crypto ca-certs command. Example OS10# crypto ca-cert delete Amazon_Root_CA.crt Successfully removed certificate OS10# crypto ca-cert delete all Proceed to delete all installed CA certificates? [confirm yes/ no(default)]:yes Supported releases 10.4.3.0 or later crypto ca-cert install Installs a certificate from a Certificate Authority that is copied to the switch. Syntax Parameters crypto ca-cert install ca-cet-filepath [filename] • ca-cert-filepath - Enter the local path where the downloaded CA certificate is stored; for example, home://CAcert.pem or usb://CA-cert.pem. • filename - (Optional) Enter the filename that the CA certificate is stored under in the OS10 trust store directory. Enter the filename in the filename.crt format. Default Command mode Not configured EXEC Security 1029