Certificate Signing Request

This feature allows you to create certificate signing requests (CSRs)/private key pairs. The CSR can be then be taken to a Certificate Authority (CA) for signing. The CA then provides the signed certificate, which can be downloaded to the switch.

Note

Note

For enhanced security, the minimum private key length is now 2,048 (previously it was 1,024). This length is enforced in both private key/self-signed certificate pairs and private key/CSR pairs.

Supported Platforms

Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X870, X440-G2, X620, X690 series switches.

New CLI Commands

configure ssl csr privkeylen length country code organization org_name common-name name

show ssl csr

Changed CLI Commands

For enhanced security and to be consistent with the new CSR command, the following existing command now requires the private key length to be a minimum of 2,048 bits (maximum is 4,096):

configure ssl certificate privkeylen length country code organization org_name common-name name