For security reasons, when downloading private keys, we recommend obtaining a pre-generated key rather than downloading a private key from a TFTP server. See Configuring Pregenerated Certificates and Keys for more information.
If the operation is successful, the existing private key is overwritten. After the download is successful, a check is performed to find out whether the private key downloaded matches the public key stored in the certificate. If the private and public keys do not match, the switch displays a warning message similar to the following: Warning: The Private Key does not match with the Public Key in the certificate. This warning acts as a reminder to also download the corresponding certificate.
Downloaded certificates and keys are not saved across switch reboots unless you save your current switch configuration. After you use the save command, the downloaded certificate is stored in the configuration file and the private key is stored in the EEPROM.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB