efa certificates device
install
Installs HTTPS and OAuth2 certificates
on SLX devices.
Syntax
efa certificates device
install
{
--ips
ip-addr
certType
[
https|
token
]}
Command Default
By default, certificates are not installed.
Parameters
- --ips
ip-addr
- Specifies a comma-separated list of the IP
addresses of the SLX devices on which you want to install the
certificate.
- certType
[
https|
token
]
- Specifies the type of certificate you are
installing.
Usage Guidelines
During the registration of an SLX device in EFA, the following configuration changes
are made on the device.
- The public certificate for
verifying an EFA token is copied to the device as an OAuth2
certificate.
- EFA generates the HTTPS
certificate for the SLX device. The certificate is copied to the device,
HTTP mode is disabled on the device, and HTTPS is enabled on the
device.
- OAuth2 is enabled as the
primary mode of authentication. Fallback is set to "local login."
You can use the efa inventory device list command to verify the
status of the certificates on the device. If the Cert/Key Saved column
contains "N," then certificates are not installed. You can then use the efa
certificates device install command to install the certificates.
Examples
This example installs the HTTPS certificate on two devices.
efa certificates device install --ips 1.1.1.1,2.2.2.2 certType http
