Downloading the Trusted Certificate to the ExtremeXOS PKI and Configuring the User Accounts

The previously generated trusted CA certificate needs to be downloaded from a TFTP server using the following command. "" is the TFTP server IP address:
DUT1_switch_model.3 # download ssl certificate trusted-ca /certs/exosCAcert.crt
 DUT1_switch_model.4 #
 DUT1_switch_model.4 # sh ssl trusted-ca exosCAcert.crt
================ exosCAcert.crt ================
        Version: 3 (0x2)
        Serial Number:
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=NC, L=Raleigh, O=Extr, OU=Exos, CN=CA-EXOS/
            Not Before: Oct 20 07:12:47 2016 GMT
            Not After : Oct 20 07:12:47 2017 GMT
        Subject: C=US, ST=NC, L=Raleigh, O=Extr, OU=Exos, CN=CA-EXOS/

The user needs to be created on the ExtremeXOS device with appropriate privileges. The name of the account would be the value present in the “commonName” field of the user-certificate that was generated (that is: exos-admin-cert.crt):

DUT1_switch_model.1 # create account admin exos-admin exospassword