HP StorageWorks 2/64 HP StorageWorks Fabric OS 5.x Command Reference Guide (AA - Page 560
Download an Issuing CA certificate., third-party certificates in the switch. To generate a CSR
![]() |
View all HP StorageWorks 2/64 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 560 highlights
Operands The operands are as follows: genkey gencsr delcsr showcsr show show certificate_name delete certificate_name export Generates a public/private key pair.This is the first step for setting up third-party certificates. The key length can be either 1,024 or 2,048 bits long. The greater the length of the key, the more secure is the connection; however, the performance goes down. The keys are generated only after deleting existing CSR and all other certificates. Generates a new CSR for the switch. This is second step for setting up third-party certificates in the switch. To generate a CSR, the admin must answer a series of questions prompted by this option. Once all questions are answered, a CSR is generated and placed in a file named ip_address.csr. The ip_address is the IP address of the switch. Deletes the CSR in the switch. Displays the contents of the CSR in the switch. Displays a list of all certificates in the switch. Displays the contents of the specified certificate. Deletes the specified certificate. Exports a CSR to a host. This is typically used to submit the CSR to a CA who in turn issues a certificate. import [-config cacert] | [-config swcert [-enable https]] Import a certificate on to the switch. Use this for the following: • Download a certificate issued by a CA after sending the CSR to the CA. • Download an Issuing CA certificate. • Set imported certificate with -config option. Specifying cacert sets the CA certificate file name in configuration and specifying swcert sets switch certificate file name in configuration. • Enable secure protocols with -enable option. This option can be used only with -config swcert. Examples To generate a public/private key pair: switch:admin> seccertutil genkey Generating a new key pair will automatically do the following: 1. Delete all existing CSRs. 2. Delete all existing certificates. 3. Reset the certificate filename to none. 4. Disable secure protocols. Continue (yes, y, no, n): [no] y Select key size [1024 or 2048]: Generating new rsa public/private key pair Done. 560 Fabric OS commands
![](/manual_guide/products/hewlettpackard-storageworks-264-hp-storageworks-fabric-os-5x-command-reference-guide-aarvhvbte-2005-b63918e/560.png)