Switch Management Commands 2272crypto certificate generateUse the crypto certificate generate command to generate a self-signedHTTPS certificate.Syntaxcrypto certificate number generate• number—Specifies the certificate number. (Range: 1–2)• generate—Regenerates the SSL RSA key.Default ConfigurationThis command has no default configuration.Command ModeGlobal Configuration modeUser GuidelinesThis command is not saved in the router switch configuration; however, thecertificate and keys generated by this command are saved in the privateconfiguration. If the RSA keys do not exist, the generate parameter must beused. The generate sub-command regenerates the RSA key pair. To save thegenerated certificate and keys on the local switch and distribute thecertificate across a stack, save the configuration. Otherwise, the certificateand keys will not be available after the next reboot.This command generates two files:• sslt_certN.pem• sslt_keyN.pemwhere N is the certificate number.To use a signed certificate on the switch, perform the following steps:• Generate the RSA and DSA keys using the crypto key generatecommand for RSA followed by DSA.• Generate a self signed certificate using the crypto key generatecommand.
