SSL Certificate Requirements and Format

To limit access to the CIM server to authorized clients, you can enable the HTTPS transport protocol between the CIM server and client. On the switch side, you must install a Secure Socket Library (SSL) certificate generated on the client and enable the HTTPS server. Certificates may be generated using third-party tools, such as openssl (available for UNIX, Mac, and Windows), and may be certified by a CA or self-signed.

The SSL certificate that you install on the switch must meet the following requirements:

• The certificate file contains the certificate and the private key.
• The private key must be RSA type.
• The certificate file should be in Private Electronic Mail (PEM) style format and have .pem as the extension.

-----BEGIN CERTIFICATE----- 
(certificate goes here) 
-----END CERTIFICATE----- 
-----BEGIN RSA PRIVATE KEY----- 
(private key goes here) 
-----END RSA PRIVATE KEY----- 
 

Only one certificate file can be installed at a time.

---

Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.