Dell S3100 Command Line Reference Guide for the Series 9.112.0P2 - Page 1790

cert-path key-file private key-path country 2-lettercode state state locality city organization organization-name orgunit unit-name cname commonname Enter the path to locally store the self-signed certificate or CSR. The path can be a full path or a relative path. If the system accepts this path, a notification is sent indicating the location where the CSR file is stored. You can then export the CSR to a CA using the "copy" command. Following is an example of a path that you can specify: flash:// certs/s4810-001-request.csr. Enter the keyword key-file to specify the private key. Enter the keyword private to specify that the key is stored in a hidden location in the NVRAM. Only one private key can exist in a hidden location at any given point in time. Enter the absolute or relative location on the device where the key is stored. (OPTIONAL) Enter the keyword country followed by the two letter code that is used to identify the country name. (OPTIONAL) Enter the keyword state followed by the name of the state. (OPTIONAL) Enter the keyword locality followed by the name of the city. (OPTIONAL) Enter the keyword organization followed by the name of the organization. (OPTIONAL) Enter the keyword orgunit followed by the name of the unit. Enter the keyword cname followed by the common name that you want to assign. NOTE: Common Name is an important attribute while creating a CSR or a self-signed certificate. Common name is the main identity presented to connecting entities. By default, the device's host name acts as the common name. However, you can still configure a different common name for the device. For example, you can specify an IP address to act as a Common Name for the device. If the Common Name does not match the device's presented identity, then even a properly signed certificate does not validate correctly. email email-address (OPTIONAL) Enter the keyword email followed a valid email address used for communication with the organization. validity days (OPTIONAL) Enter the keyword validity followed by the number of days for which the certificate is valid. NOTE: For CSRs, validity has no effect. For self-signed certificates, if validity is not specified, it defaults to 3650 days, or 10 years. length length altname altname (OPTIONAL) Enter the keyword length followed by a bit length value. The default key length for both FIPS and non-FIPS mode is 2048. Minimum key length value for FIPS mode is 2048. The range is from 2048 to 4096. Minimum key length value for non-FIPS mode is 1024. The range is from 1024 to 4096. (OPTIONAL) Enter the keyword altname followed by the subject alternate name for the organization. For example, altname IP:192.168.1.100. Defaults Command Modes Command History NA. EXEC Privilege This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command: 1790 X.509v3