Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual page 911

Chapter 43 Configuring Certificate Authorities and Digital Certificates
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Figure 43-9
Step 4 Enter the output file name as bootflash:filename to store the exported PKCS#12 identity.
Step 5 Enter the required password. The password is set for encoding the PKCS#12 data. On successful
completion, the exported data is available in bootflash in the specified file.
Step 6 Click Apply Changes to save the changes.
To import a certificate and key pair formatted as a PKCS#12 formatted file, follow these steps:
Expand Switches > Security and then select PKI in the Physical Attributes pane.
Step 1
Step 2 Click the Trust Point Actions tab in the Information pane (see
Step 3 Select the pkcs12import option from the Command drop-down menu to import the key-pair, identity
certificate, and the CA certificate or certificate chain in the PKCS#12 format to the selected trust point.
Step 4 Enter the input in the bootflash:filename format, containing the PKCS#12 identity.
Step 5 Enter the required password. The password is set for decoding the PKCS#12 data. On completion, the
imported data is available in bootflash in the specified file.
Step 6 Click Apply Changes to save the changes.
On completion the trust point is created in the RSA key-pair table corresponding to the imported
key-pair. The certificate information is updated in the trust point.
The trust point must be empty (with no RSA key-pair associated with it and no CA is associated with it
Note
using CA authentication) for the PKCS#12 file import to succeed.
Configuring a CRL
To configure the CRL from a file to a trust point using Fabric Manager, follow these steps:
Click Switches > Security > PKI in the Physical Attributes pane.
Step 1
OL-17256-03, Cisco MDS NX-OS Release 4.x
Pkcs12export Option Exports a Key-Pair
Cisco MDS 9000 Family Fabric Manager Configuration Guide
Configuring CAs and Digital Certificates
Figure 43-9).
43-15