398 CHAPTER 13: CRYPTOGRAPHY COMMANDS
crypto generate
request
Generates a Certificate Signing Request (CSR). This command outputs a
PEM-formatted PKCS #10 text string that you can cut and paste to
another location for delivery to a certificate authority.
This command generates either an administrative CSR for use with
3WXM and Web Manager, or an EAP CSR for use with 802.1X clients.
Syntax —
crypto generate request {admin | eap | webaaa}
admin — Generates a request for an administrative certificate to
authenticate the WX switch to 3WXM or Web Manager.
eap — Generates a request for an EAP certificate to authenticate the
WX switch to 802.1X supplicants (clients).
webaaa — Generates a request for a WebAAA certificate to
authenticate the WX switch to WebAAA clients.
After you type the command, you are prompted for the following
variables:
Country Name string — (Optional) Specify the abbreviation for the
country in which the WX switch is operating, in 2 alphanumeric
characters with no spaces.
State Name string — (Optional) Specify the abbreviation for the
name of the state, in 2 alphanumeric characters with no spaces.
Locality Name string — (Optional) Specify the name of the locality,
in up to 80 alphanumeric characters with no spaces.
Organizational Name string — (Optional) Specify the name of the
organization, in up to 80 alphanumeric characters with no spaces.
Organizational Unit string — (Optional) Specify the name of the
organizational unit, in up to 80 alphanumeric characters with no
spaces.
Common Name string — Specify a unique name for the WX switch, in
up to 80 alphanumeric characters with no spaces. Use a fully qualified
name if such names are supported on your network. This field is
required.
Email Address string — (Optional) Specify your email address, in
up to 80 alphanumeric characters with no spaces.
Unstructured Name string — (Optional) Specify any name, in up to
80 alphanumeric characters with no spaces.