CERTIFICATS SSL - Générer une clé Privée et CSR sur Cisco IOS 12.x
- The Cisco SDM GUI will not allow you to fill in a value for the City attribute.
- These are the commands to be used within the IOS:
- Generate rsa general-keys label globalsign-key exp
- --Set modulus to 1024 Crypto ca trustpoint globalsign Enroll term pem Crl optional
- Subject-name
o Common Name:Enter the exact host and domain name that you require to secure. (Must be the Fully Qualified Domain Name: www.yourdomain.com)
o Organizational Unit:Enter the name of the identity's Organizational Unit. (Example: Support)
o Organization:Enter the name of the identity's Organization. (Example: ABC Corp)
o Country:Choose the drop-down list to view a list of country abbreviations. Select the country in which the Organization is located.
o State/Province:Enter the full name of the state or province in which the identity resides
o FQDN:your entire domain name including any sub-domains
- Rsakeypair globalsign-key
- Exit
- Crypto ca enroll globalsign
- --No, do not include router serial number
- --No, do not include IP address
- --Yes, display certificate request to terminal