Cisco 11503 - CSS Content Services Switch Configuration Manual page 41

Chapter 2 SSL Configuration Quick Starts
Table 2-1
Task and Command Example
4.
5.
OL-5655-01
RSA Certificate and Key Generation Quick Start (continued)
After generating the RSA key pair, generate the Certificate Signing Request
(CSR) file for the RSA key pair file. For example, enter:
(config) # ssl gencsr myrsakey1
You are about to be asked to enter information
that will be incorporated into your certificate
request. What you are about to enter is what is
called a Distinguished Name or a DN.
For some fields there will be a default value,
If you enter '.', the field will be left blank.
Country Name (2 letter code) [US]US
State or Province (full name) [SomeState]New York
Locality Name (city) [SomeCity]Albany
Organization Name (company name) [Acme Inc]Cisco Systems, Inc.
Organizational Unit Name (section) [Web Administration]Web Admin
Common Name (your domain name) [www.acme.com]www.cisco.com
Email address [webadmin@acme.com]webadmin@cisco.com
-----BEGIN CERTIFICATE REQUEST-----
MIIBWDCCAQICAQAwgZwxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNQTETMBEGA1UE
BxMKQm94Ym9yb3VnaDEcMBoGA1UEChMTQ2lzY28gU3lzdGVtcywgSW5jLjESMBAG
A1UECxMJV2ViIEFkbWluMRYwFAYDVQQDEw13d3cuY2lzY28uY29tMSEwHwYJKoZI
hvcNAQkBFhJra3JvZWJlckBjaXNjby5jb20wXDANBgkqhkiG9w0BAQEFAANLADBI
AkEAqHXjtQUVXvmo6tAWPiMpe6oYhZbJUDgTxbW4VMCygzGZn2wUJTgLrifDB6N3
v+1tKFndE686BhKqfyOidml3wQIDAQABoAAwDQYJKoZIhvcNAQEEBQADQQA94yC3
4SUJJ4UQEnO2OqRGLOZpAElc4+IV9aTWK6NmiZsM9Gt0vPhIkLx5jjhVRLlb27Ak
H6D5omXa0SPJan5x
-----END CERTIFICATE REQUEST-----
CSS11503(config)#
The ssl gencsr command generates the CSR in PKCS10 encoded in Privacy
Enhanced Mail (PEM) format and outputs it to the screen. Note that the
CSR is not saved in the CSS.
Transfer the certificate request to the Certificate Authority (CA). Most
major Certificate Authorities have Web-based applications that require you
to cut and paste the certificate request to the screen.
If you require a global site certificate that allows 128-bit encryption for
export-restricted browsers, apply for a StepUp/SGC or chained certificate
from the CA.
You will receive your certificate in one to seven days.
Cisco Content Services Switch SSL Configuration Guide
2-3