522 CHAPTER 15: CRYPTOGRAPHY COMMANDSTo generate a self-signed administrative certificate, type the followingcommand:WX4400# crypto generate self-signed adminCountry Name:State Name:Locality Name:Organizational Name:Organizational Unit:Common Name: wx1@example.comEmail Address:Unstructured Name:success: self-signed cert for admin generatedSee Also crypto certificate on page 516 crypto generate key on page 517crypto otp Sets a one-time password (OTP) for use with the crypto pkcs12command.Syntax — crypto otp {admin | eap | web} one-time-password admin — Creates a one-time password for installing a PKCS #12object file for an administrative certificate and key pair—andoptionally the certificate authority’s own certificate—to authenticatethe WX switch to 3WXM or Web Manager. eap — Creates a one-time password for installing a PKCS #12 objectfile for an EAP certificate and key pair—and optionally the certificateauthority’s own certificate—to authenticate the WX switch to 802.1Xsupplicants (clients). web — Creates a one-time password for installing a PKCS #12 objectfile for a WebAAA certificate and key pair—and optionally thecertificate authority’s own certificate—to authenticate the WX switchto WebAAA clients. one-time-password — Password of at least 1 alphanumericcharacter, with no spaces, for clients other than Microsoft Windowsclients. The password must be the same as the password protectingthe PKCS #12 object file.
