CSS 11503 SSL Module: .pfx file export to sftp

[Jay Matrona]

Hello

I wanted to know of there was a way to export the .pfx files off of the SSL Module to an SFTP server.....preferably in bulk not one at a time.  I want a central storage location for these files in the event that the CSS or the SSL module crashes.

Thanks

[pablo.nxh · Accepted solution]

Hi Jay,

Sure you can export the .pfx files out of the CSS but you need to do this one by one, there is no way you can get them out all at once.

To export the files you first need to define your SFTP server IP address, username and passwd:

CSS(config)# ftp-record SFTP_Server 10.10.10.1 username "password" 

Once you have the file name you need to enter this command:

CSS# copy ssl sftp SFTP_Server export Certificate.pfx PKCS12 "passphrase" "password"

: This is the password used to protect the file when it was created.
: This is a local significant password on the CSS used when the file was
            imported into the box.

* If you don't know these passwds you can't export the files out of the CSS.

HTH
__ __ 
Pablo

[Jay Matrona]

Thanks.

[Jay Matrona]

Hey Pablo

One other thing I just wanted to confirm....

Will this export command create a copy of the .pfx or actually move it off of the SSL Module?

Thanks Again

[pablo.nxh]

Hi Jay,

The command will just create a copy of the file on your external sftp server.

In case you need to completely remove a SSL file from the CSS this is the command:

CSS# clear ssl file cert.pfx "password"

Glad to help =) 
__ __ 
Pablo