Activating named certificates using the CLI

Prev Next

Use the commands in this section to activate the web-cert certificate on the Web server, and to activate the mta-cert certificate on the MTA.

Note

If you type web server certificate name ? at the command line, a list of all certificates in the certificates database will be displayed. However, only the "web-cert" or "system-self-signed" certificate can be activated. Likewise on the Email Security — Server appliance, if you type email-analysis mta certificate name ? , a list of all certificates in the certificates database will be displayed, but only the "mta-cert" or "system-self-signed" certificate can be activated.

To activate the web-cert certificate on the Web server:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Activate the certificate:

    hostname (config) # web server certificate name web-cert
  3. Verify your changes:

    hostname (config) # show web
  4. Save your changes.

    hostname (config) # write memory

Note

To reactivate the system-self-signed certificate, use the no web server certificate name or web server certificate name system-self-signed command.

To activate the mta-cert certificate on the MTA:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Activate the certificate:

    hostname (config) # email-analysis mta certificate name mta-cert
  3. Verify your changes:

    hostname (config) # show email-analysis
  4. Save your changes.

    hostname (config) # write memory

Note

To reactivate the system-self-signed certificate, use the no email-analysis mta certificate name or email-analysis mta certificate name system-self-signed command.

Example

The following example activates web-cert on the Web server, which is currently using the system self-signed certificate.

hostname (config) # show web

Web User Interface server:
   Web interface enabled:  yes
   ...  
   HTTPS certificate name:         system-self-signed
   ...
hostname (config) # web server certificate name web-cert
hostname (config) # show web

Web User Interface server:
   Web interface enabled:  yes
   ....
   HTTPS certificate name:         web-cert
   ...