How to generate CSR on switches for web auth with NGS

Hello
I am doing a dot1x solution with web auth on cisco 3750 switches.
Once the wired client get put into web auth state (after dot1x and mab) and goes to a website, he gets a certificate warning. This is because the certificate of the cisco switch is selfsigned.
I want to use a verisign certificate to solve this error, but I cannot find a way to generate a CSR on a switch. I only found a guide how to request a certificate from a CA on the local network, but this is also not a solution, because the clients using the web auth, will not know the internal CA.
Is there any way to solve this?
Greetings
Steven

Hi Steven,
The below document is actually for IOS SSLVPN, but the certificate portion should be the same:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6657/white_paper_c07-372106_ps6657_Products_White_Paper.html
Search for "Appendix B" and it goes into creating a trustpoint and then one section is for self-signed and another is for generating a certificate request to send to an external CA.
Once a trustpoint is created the command to actually generate the CSR is "crypto pki enroll ".
This document goes into a little more detail on all the indivual commands and what they do:
http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_cert_enroll_pki.html
Also you could use something external to the switch like OpenSSL to generate the CSR/private key and then use that to request a cert from your Verisign CA and then import the cert/keypair into the IOS device.
Thanks,
Nate

Similar Messages

How to generate CSR (certificate signing request) in PKCS#10 format

Hi,
First, I am a novice in security issues.
Problem:
I know how to generate CSR using PKCS#10 format with keytool. However I need to implement this functionality in my application. Unfortunately I can't find any docs describing this issue.
Do anybody know about some API where I just pass data and it will generate CSR for me?
Many Thanks,
Miso

Hi again,
After a long research I am finally able to generate PKCS#10 cert. request files:
public static void generatePKCS10() throws Exception {
        // generate PKCS10 certificate request
        KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");
        String sigAlg = "MD5WithRSA";
        // generate private key - use java.util.SecureRandom for entropy
        keyGen.initialize(1024, new SecureRandom());
        KeyPair keypair = keyGen.generateKeyPair();
        PublicKey publicKey = keypair.getPublic();
        PrivateKey privateKey = keypair.getPrivate();
        PKCS10 pkcs10 = new PKCS10(publicKey);
        Signature signature = Signature.getInstance(sigAlg);
        signature.initSign(privateKey);
             //common, orgUnit, org, locality, state, country
        X500Name x500Name = new X500Name(
                  "CName",               // CN
                  "OUnit",               // OU
                  "Organization",          // O
                  "Bratislava",          // L
                  "Slovakia",               // S
                  "SK");               // C
        pkcs10.encodeAndSign(new X500Signer(signature, x500Name));
        // PKCS10 request generated
        pkcs10.print(System.out);
Problem 1:
However, this generates only a request with X500 subject's name ("CN, OU, O, ..."). But I also want to specify other things like "Key Usage" (example: "Digital Signature, Key Encipherment, etc.") or "Generic IA5 String" (example: "Only for test purposes."). How to do that?
Problem 2:
I'm also having trouble to find javadoc for "sun.security" package. As you can see, I'm using "sun.security.pkcs.PKCS10" class for generating CSR in PKCS10 format, but can't find any javadoc for it.
Many thanks,
Miso

How can i see visitor statistics for web page hosted on osx lion server

Hello
how can i see visitor statistics for web page hosted on osx lion server
Thanks
Adrian

Just click inside the url address bar. Full url address highlighted, will appear.
Best.

Have published iweb site for five years with no problems and just opened a new site and get - 404: Page not found This error is generated when there was no web page with the name you specified at the web site.-is the problem with iweb or with hosting? T

I am sorry if thie is republished-My first time doing this and I am not sure what goes where and where to hear feedback.
Have published iweb site for five years with no problems and just opened a new site and get -
404: Page not found
This error is generated when there was no web page with the name you specified at the web site.-
Troubleshooting suggestions:
Ensure the page you are linking to exists in the correct folder.
Check your file name for case sensitivity . Index.htm is not the same as index.htm!
Temporarily disable any rewrite rules by renaming your .htaccess file if it exists
is the problem with
iweb or with hosting?
One Apple tech started to fix Iweb and had to end session and the next said problem with hosting at Network Solutions as it published
to local folder. NWS has checked sttting a few times-
Any help would be extremely appreciated as trying to fix this for about five weeks
Thanks VG
<Email Edited by Host>

It's a really bad idea to post your email address - it's an invitation to spam - and I've asked the Hosts to remove it. (Even though I've now noticed you mis-spelled it! - anyway, never post your address in a forum.)
You have a site here: http://virginiagordon.com/www.virginiagordon.com/WELCOME.html
If that's not the page you are having trouble with, what is that page's URL?

How to generate an XML file for an animation of IK armature

Can someone please tell me how to generate an XML file for an animation of IK armature.
I have a 5 keyframe/16 frame animation of a human character made up of a series of moveiclip symbols that is animated with an IK armature. I need the XML information from the animation.
When I go to Commands > Export Motion XML I get the error message "There is more than one object on frame 1" and then nothing happens.
Thank you,
c

I hope that's not the case. I want to write to adobe about it. I think it's a great feature and it functions really well even though it is not a very developed IK tool. My biggest issue with it is ouput options and integration with motion tweens.
I have seen a lot of examples of animators using it online, just no one talked about output. I just feel it hasn't been developed. It can generate a sprite sheet but only for a single pose frame of the animation, and not all the key frames or pose tweens. I find that functionality quite odd, as if adobe just forgot about IK when added in sprite sheets, etc. and the reason it half works is just an accident.

How To Generate Debug Log Files for ebs jsp?

hi How To Generate Debug Log Files for ebs r12 jsp?
and where i get the log .please help me thanks!

Please check following MOS Document
Oracle Application Server Diagnostic Tools and Log Files in Applications Release 12 (Doc ID 454178.1)

How sharepoint understand when user requests for web applications by their DNS names

HI
I configured Alternate access mapping in my sharepoint farm for default ,intranet zones
and spt farm has two web front end servers and they load balancing by F5 device
in WFE servers there are different web applications are running on different ports
so here I want to know how load balancing works, load balancing configured in F5 device.
when users request a webapplication from browser (ex http://cms) where this request will go
1)when I ping cms and other web applicaations it returns me a loadbalancer server IP for all web applications;
ping cms : it returns 10.xxx.0.80 , same ip returns when I ping for other web app
but ex CMS web application run on the 10.xxx.1.26:81 port in sharepoint server
2) and these sharepoint web applications running on different ports in sharepoint web servers , so here how sharepoint understand when user requests for web applications by their DNS names
http://cms and http://products etc
adil

I'm not sure if the F5 can add a port number (I'm not an expert on load balancers). But in general if you design the SharePoint site to run on port 81 then you need to have port 81 appended to the request or it won't work. http://cms in your
example would take you to http://cms:80 not http://cms:81. But in general DNS will resolve the address back to the F5 load balancer. The load balancer will look at the header of the HTTP request (which contains the original address you requested)
and forward the request to the appropriate web front end IP address. If your web front end is using one IP address for multiple sites then those sites need to be differntiated by using a custom port like 81 (which must be included in the original request)
or because a host header was bound to the web application when it was created. If they are running on different port numbers then the request must include the port number by the time it gets to the SharePoint server.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

How to generate a number sequence for a column of a Z*table?

Hi ,
How to generate a number sequence for a column of a Z*table?
plz guide me.
thanks
Albert

1) Use SNRO for defining a number range.
2) Use FM NUMBER_GET_NEXT for getting the next number with object, sub object etc..
See one example below.
      CALL FUNCTION 'NUMBER_GET_NEXT'
        EXPORTING
          nr_range_nr                   = c_01
          object                        = c_z_prd_code
*           QUANTITY                      = '1'
         subobject                     = p_vkorg
*           TOYEAR                        = '0000'
*           IGNORE_BUFFER                 = ' '
       IMPORTING
         number                        = in_prd_code
*           QUANTITY                      =
*           RETURNCODE                    =
        EXCEPTIONS
              interval_not_found            = 1
              number_range_not_intern       = 2
              object_not_found              = 3
              quantity_is_0                 = 4
              quantity_is_not_1             = 5
              interval_overflow             = 6
              buffer_overflow               = 7
              OTHERS                        = 8
3) You may write these code in main program of the table maintinence
rgds,
TM.

Building client proxies for web services with SOAP attachemtns

Hi all.
I'm currently building a series of web services that take SOAP attachments as
input, but I am unable to generate the java proxies for testing the services via
WebLogic Workshop 8.1. When I attempt to build the proxy, I get the following
error:
Warning: Failed to generate client proxy from WSDL definition for this service.
Suggestion: Please verify the <types> section of the WSDL.
Is there something I need to alter to get this to work, or does workshop not support
client proxies for web services with DataHandler parameters?
Thanks.
-Brian

Thanks for the help. This is my first web service with SOAP attachments, so it
may have been a long time till I realized that.
-Brian
"Michael Wooten" <[email protected]> wrote:
>
Thanks Brian,
The problem is that you are trying to use the "document" soap-style :-)
If you change this to "rpc", you'll should be able to successfully generate
the
client proxy jar. The soap-style property, is at the bottom of the "protocol"
property sheet section, for the JWS.
Regards,
Mike Wooten
"Brian McLoughlin" <[email protected]> wrote:
Sure, sorry about that. Attached is the wsdl for a sample web service
I created
just to test the proxy generation.
"Michael Wooten" <[email protected]> wrote:
Hi Brian,
Would it be possible for you to post the WSDL, so we can see what might
be causing
the problem?
Regards,
Mike Wooten
"Brian McLoughlin" <[email protected]> wrote:
Hi all.
I'm currently building a series of web services that take SOAP attachments
as
input, but I am unable to generate the java proxies for testing theservices
via
WebLogic Workshop 8.1. When I attempt to build the proxy, I get the
following
error:
Warning: Failed to generate client proxy from WSDL definition for
this
service.
Suggestion: Please verify the <types> section of the WSDL.
Is there something I need to alter to get this to work, or does workshop
not support
client proxies for web services with DataHandler parameters?
Thanks.
-Brian

How can I purchase FormsCentral premium for my organzation with a purchase order?

How can I purchase FormsCentral premium for my organzation with a purchase order?

Hi;
A FormsCentral subscription purchase requires a credit card in one of the supported countries for purchase. It cannot be purchased using a purchase order, only a credit card.
Thanks,
Josh

How to process Fisacl year change for Investment Management with Project?

How to process Fisacl year change for Investment Management with Project as measure

hi
check this menu path
Accounting --> Investment Management --> Programs --> Periodic Processing --> Fiscal Year Change

How to config a shared cache for multiple environments with C API

How to config a shared cache for multiple environments with C API? Just like Java edition. Chapter 2. Database Environments
I want to open large number of databases, at least 10,000. But as the counts of databases opened increase, the db->open operation become very slow. It almost cost 2 hours to 10,000 databases.
So I try to distribute these databases to multiple environments ( for example, 5 envs ). And in order to improve the efficient of memory use, I want to share cache between envs.

Hi,
It is not clear what you meaning about multiple environments. Do you mean these environments are in different directories or in the same directory ? If you mean environments in different dirs share the same cache, it is interesting why you need that.
If you do not use DB_PRIVATE to open the environment, the created cache will be on disk, in the environment directory, so it can be shared by multiple processes and multiple threads. Currently, the cache file is in the environment directory, and we do not support specifying a separate directory for cache only.
Regards,
Oracle Berkeley DB.

Web auth with , intenal web page of WLC and ISE as radius server

Hi All ,
We have created a SSID as web auth with internal web page for login . In advanced tab we configured AAA server. AD is integrated with ISE .
When the user tries to get connect , he is getting redirect URL . But during the authentication , we are getting error in ISE as
"ise has problems communicating with active directory using its machine credentials " and authentication getting failed .
When we have L2 security mechanism enabled with PEAP , ISE is able to read the AD and providing authentication .
Only for L3 web auth it is not happening..
Any clue on this ..???
Thanks,
Regards,
Vijay.

Machine credentials requires a lookup on the computer OU and that has to be defined on the client side.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

How to generate csr for third party code signing cert?

I've been reading about code signing, but can't see how to generate a csr to use with a third party CA. Does someone have a tutorial, link, suggestion?

Hi,
Here is an document which discussed on how to implement code signing with using third party certificate for you reference:
http://download.microsoft.com/download/a/f/7/af7777e5-7dcd-4800-8a0a-b18336565f5b/best_practices.doc
For further suggestions, it is recommend you to get further support in the MSDN Forum so that you can get the most qualified pool of respondents.
http://social.msdn.microsoft.com/forums/en-US/categories/
Thanks
Tiger Li
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

How to Generate a Java file for a JSP Page

Hi ,
I am using weblogic11 .
I am working on a JSP page which nearly consists of 4000 lines of code.
I need to debug the file , but weblogic server is not generating the java file for the JSP pages .
Please let me know how can i genertae Java file for the jsp pages ??

JSPs are compiled into servlets automatically and those classes are stored in WEB-INF/classes folder. Servlet engine handles servlets.

How to generate CSR on switches for web auth with NGS

Similar Messages

Maybe you are looking for