Users Guide

Table Of Contents
OS10# crypto cert install crt-file usb://s4048-001-crt.pem key-file usb://s4048-001-crt.key
This will replace the already installed host certificate.
Do you want to proceed ? [yes/no(default)]:yes
Processing certificate ...
Host certificate installed successfully.
3. Congure an X.509v3 security prole.
OS10# show crypto cert
--------------------------------------
| Installed non-FIPS certificates |
--------------------------------------
s4048-001-csr.pem
--------------------------------------
| Installed FIPS certificates |
--------------------------------------
OS10# config terminal
OS10(config)# crypto security-profile radius-admin
OS10(config-sec-profile)# certificate s4048-001-csr
OS10(config-sec-profile)# exit
4. Congure the RADIUS over TLS server.
OS10# radius-server host 10.0.0.1 tls security-profile radius-admin key radsec
5. Congure RADIUS-based user authentication.
OS10# aaa authentication login default group radius local
1000
Security