How do I backup & retrieve SSLM keys and certificates?

[zeremy]

Hi,

I'm new to implementing SSLM module and I need help on the following:

- Importing and exporting of key and certificate (PKCS12 and PEM)

- Duplicating keys and certificates on standby SSL Services Module using the key and certificate import and export mechanism

- Manual key archival, recovery, and backup

The SSL Services Module Configuration Note provides no step-by-step instructions or example on this important step in an event of a disaster recovery.

Many thanks for any help.

[Gilles Dufour]

The backup is easy if you have the keys and certificates in a file.

Just keep the file somewhere safe.

In case you need to reconfigure the SSLM, you can simply import those files.

If you generated the keys and certificates on a server instead of the SSLM, it is even easier to do as you should already have those files.

If you generated the key on the SSLm, you need to export it.

I would recommend the use of CVDM [cisco view device manager].

It's a free utility that will let you configure the Cat6k and the SSLM from a web browser.

There is a key management section that will help you import/export keys.

http://www.cisco.com/en/US/products/sw/cscowork/ps4565/products_user_guide_chapter09186a0080418c2c.html#wp1178684

Regards,

Gilles.