Creating Keys and Certificates 425
2 Use a text editor to open the PKCS #7 file, and copy and paste the entire
text block, including the beginning and ending delimiters, into the CLI.
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE----- to the end
-----END CERTIFICATE-----.
Installing a CA’s Own
Certificate
If you installed a CA-signed certificate from a PKCS #7 file, you must also
install the PKCS #7 certificate of that CA. (If you used the PKCS #12
method, the CA’s certificate is usually included with the key pair and
server certificate.)
To install a CA’s certificate, use the following command:
crypto ca-certificate {admin | eap | web}
PEM-formatted-certificate
When prompted, paste the certificate under the prompt. For example:
You must paste the entire block, from the beginning
-----BEGIN CERTIFICATE REQUEST----- to the end
-----END CERTIFICATE REQUEST-----.
# crypto ca-certificate admin
Enter PEM-encoded certificate
-----BEGIN CERTIFICATE-----
MIIDwDCCA2qgAwIBAgIQL2jvuu4PO5FAQCyewU3ojANBgkqhkiG9wOBAQUFA
mzerMClaweVQQTTooewi\wpoer0QWNFNkj90044mbdrl1277SWQ8G7DiwYUt
.....
Lm8wmVYxP56M;CUAm908C2foYgOY40=
-----END CERTIFICATE-----
