<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:51" />
    <title>Exporting and Importing Identity Information in PKCS#12 Format </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1646;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1074134"> </a><h1 class="pTitle">
Exporting and Importing Identity Information in PKCS#12 Format

</h1>
<a name="wp1074136"> </a><p class="pBody">
You can export the identity certificate along with the RSA key pair and CA certificate (or the entire chain 
in the case of a subordinate CA) of a trust point to a PKCS#12 file for backup purposes. You can later 
import the certificate and RSA key pair to recover from a system crash on your switch or when you 
replace the supervisor modules.

</p>
<a name="wp1074137"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> Only the <span style="font-weight: bold">bootflash:</span><span style="font-weight: normal">filename</span> format local syntax is supported when specifying the export and import 
URL.

</p>
<a name="wp1078292"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1119236"> </a><p class="pBody">
To export a certificate and key pair to a PKCS#12-formatted file, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1119237"> </a><li class="pSmartList1">Expand <b class="cBold">Switches</b> &gt; <b class="cBold">Security, </b>and then select <b class="cBold">PKI</b> in the Physical Attributes pane. 
</li>
<a name="wp1119241"> </a><li class="pSmartList1">Click the <b class="cBold">Trust Point Actions </b>tab in the Information Pane .
</li>
<a name="wp1119242"> </a><li class="pSmartList1">Select the <b class="cBold">pkcs12export</b> option in the Command drop-down menu to export the key pair, identity 
certificate, and the CA certificate or certificate chain in PKCS#12 format from the selected trust point.
</li>
<a name="wp1119248"> </a><p class="pBodyRelative">

</p>
<a name="wp1119249"> </a><li class="pSmartList1">Enter the output file name as bootflash:filename to store the exported PKCS#12 identity. 
</li>
<a name="wp1119250"> </a><li class="pSmartList1">Enter the required password. The password is set for encoding the PKCS#12 data. On successful 
completion, the exported data is available in bootflash in the specified file.
</li>
<a name="wp1119251"> </a><li class="pSmartList1">Click <b class="cBold">Apply Changes </b>to save the changes. 
</li>
</ol></div>
<a name="wp1119280"> </a><p class="pBody">
To import a certificate and key pair formatted as a PKCS#12 formatted file, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1119281"> </a><li class="pSmartList1">Expand <b class="cBold">Switches</b> &gt; <b class="cBold">Security, </b>and then select <b class="cBold">PKI</b> in the Physical Attributes pane. 
</li>
<a name="wp1119285"> </a><li class="pSmartList1">Click the <b class="cBold">Trust Point Actions </b>tab in the Information pane.
</li>
<a name="wp1119286"> </a><li class="pSmartList1">Select the <b class="cBold">pkcs12import</b> option from the Command drop-down menu to import the key-pair, identity 
certificate, and the CA certificate or certificate chain in the PKCS#12 format to the selected trust point. 
</li>
<a name="wp1119287"> </a><li class="pSmartList1">Enter the input in the bootflash:filename format containing the PKCS#12 identity. 
</li>
<a name="wp1119288"> </a><li class="pSmartList1">Enter the required password. The password is set for decoding the PKCS#12 data. On completion, the 
imported data is available in bootflash in the specified file.
</li>
<a name="wp1119289"> </a><li class="pSmartList1">Click <b class="cBold">Apply Changes</b> to save the changes. 
</li>
<a name="wp1119290"> </a><p class="pListBodyLevel1">
On completion the trust point is created in the RSA key-pair table corresponding to the imported key 
pair. The certificate information is updated in the trust point. 

</p>
</ol></div>
<a name="wp1074228"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> The trust point must be empty (with no RSA key pair associated with it and no CA is associated with it 
using CA authentication) for the PKCS#12 file import to succeed.

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
