
Chapter 11 Managing certificates 575
Nortel Secure Network Access Switch 4050 User Guide
The recommended steps to update an existing certificate are:
1 Check the certificate numbers currently in use to identify an unused certificate
number.
In the CLI, use the
/cfg/cur cert command. In the SREM, use the
Certificates > Certificates screen to add a new certificate.
2 Create a new certificate, using an unused certificate number (see “Generating
and submitting a CSR using the CLI” on page 579 or “Generating and
submitting a CSR using the SREM” on page 601).
a Generate a CSR.
b Submit the CSR to a CA.
3 When you receive the new, signed certificate, add it to the Nortel SNAS 4050
(see “Installing certificates and keys” on page 573).
4 Map the new certificate to the portal server (see “Configuring SSL settings
using the CLI” on page 139 or “Configuring SSL settings using the SREM”
on page 176).
5 After testing to verify that the new certificate works as intended, delete the old
certificate.
In the CLI, use the
/cfg/cert <old cert ID>/del command. In the
SREM, use the Certificates > Certificates screen to remove the old
certificate.
Managing private keys and certificates using the CLI
You can perform the following certificate management tasks in the CLI:
• view, validate, and manage certificates and private keys (see “Managing and
viewing certificates and keys using the CLI” on page 577)
• generate requests for signed certificates (see “Generating and submitting a
CSR using the CLI” on page 579)
• add certificates by copy-and-paste (see “Adding a certificate to the Nortel
SNAS 4050 using the CLI” on page 584)
• add private keys by copy-and-paste (see “Adding a private key to the Nortel
SNAS 4050 using the CLI” on page 587)
Comentarios a estos manuales