0

I am trying to enable https and disable http to make dell more secure. I am trying to generate self-sign certificate with these commands and having this error.

(config)#crypto certificate 1 generate

(config-crypto-cert)#exit

Certificate generation failed. Please check logs for more details..

#show logging

SSLT[emWeb]: sslt_api.c(1201) 607965 %% SSLT: ssltCertificateGenerate keyFile not exist
Improve this question

1 Answer 1

Reset to default
2

The log message points in the right direction - you first need to generate key pairs on the switch:

console(config)#crypto key generate dsa
console(config)#crypto key generate rsa
console(config)#ip ssh server
console(config)#crypto certificate 1 generate
console(config-crypto-cert)#key-generate
console(config-crypto-cert)#exit
console(config)#ip http secure-server

https://www.dell.com/support/kbdoc/de-de/000121381/how-to-set-up-management-access-for-the-n1500-series-switch?lang=en

Improve this answer
2
  • Console help says key generate - Regenerate SSL RSA key. I did not try as it does not look rational. I already ran crypto key generate rsa command
    – hakkican
    Jun 8 at 10:03
  • console(config-crypto-cert)#key-generate console(config-crypto-cert)#organization-name BIGORG should be run otherwise it gives an error.
    – hakkican
    Jun 8 at 10:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.