Chapter 30 Advanced Feature And Concept; Ssl Certificate Requirements And Format; Configuring The Cim Server; Installing An Ssl Certificate For The Cim Server - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Common Information Model
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
A CIM client is required to access the CIM server. The client can be any client that supports CIM.

SSL Certificate Requirements and Format

To limit access to the CIM server to authorized clients, you can enable the HTTPS transport protocol
between the CIM server and client. On the switch side, this requires that you install a Secure Socket
Library (SSL) certificate generated on the client and enable the HTTPS server. Certificates may be
generated using third party tools such as 'openssl' (available for UNIX, Mac and Windows) and may be
certified by a CA or self signed.
The SSL certificate that you install on the switch must meet the following requirements:
•
•
•
Only one certificate file can be installed at a time.

Configuring the CIM Server

To configure the CIM server on the switch, follow these steps:
Install an SSL certificate (optional).
Step 1
Step 2 Configure the transport protocol (optional).
Step 3 Enable the CIM server.
This section includes the following topics:
•
•
•

Installing an SSL certificate for the CIM server

To install a conforming SSL certificate for the CIM server, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# switch(config)# cimserver
certificate bootflash:simserver.pem
switch(config)# cimserver clearcertificate
Cisco MDS 9000 Family CLI Configuration Guide
30-2
The certificate file contains the certificate and the private key.
The private key must be RSA type.
The certificate file should be in PEM (Private Electronic Mail) style format and have .pem as the
extension.
-----BEGIN CERTIFICATE-----
(certificate goes here)
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
(private key goes here)
-----END RSA PRIVATE KEY-----
Installing an SSL certificate for the CIM server, page 30-2
Configuring the transport protocol for the CIM server, page 30-3
Enabling the CIM Server, page 30-3
Chapter 30 Advanced Features and Concepts
Purpose
Enters configuration mode.
Installs an SSL certificate specified in the file
named with a .pem extension
Optional. Uninstalls the currently installed SSL
certificate.
OL-18084-01, Cisco MDS NX-OS Release 4.x