importing multiple certs at once into an ACE SM

[axfalk]

We have quite a few certs that we need to import into the ACE SM, running A2(2.32). Is there a way to import them all at once as opposed to one by one?

Thanks...

[Kristopher Martinez]

You can use the crypto bulk import function on the ACE to accomplish this.  H

ere is the documenation for that process:

http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_0/configuration/ssl/guide/certkeys.html#wp1052415

Here is the example from the documentation:

For example, to perform a bulk import all of the RSA key files from an SFTP server:

host1/Admin# crypto import bulk sftp 1.1.1.1 JOESMITH /USR/KEYS/*.PEM

Initiating bulk import. Please wait, it might take a while...

Connecting to 1.1.1.1...

Password: password

...

Bulk import complete. Summary:

Network errors: 0

Bad file URL: 0

Specified local files already exists:0

Invalid file names: 1

Failed reading remote files: 5

Failed reading local files:0

Failed writing local files:0

Other errors:0

Successfully imported:10

host1/Admin#

Regards
Kris

[axfalk]

Thanks for your reply. From the article, it looks like the "bulk" parameter is only avail in conjunction with SFTP. We're running TFTP - is there a similar bulk feature avail with it?

Thanks again

[axfalk]

or use bulk export for that matter???

[sachinga.hcl · Accepted solution]

Hi Axfalk,

You can use only sftp method for importing certificates in bulk.

It would be easy if set one windows machine with available free sftp server or in more general ssh servers are also sftp servers.

And then put your all certifices in one directory as cisco ace would not allow you to look into multiple remote directories when using import bulk command.

Once your ssh/sftp server ready its simple to install the certificates in bulk using this servers ip for sftp server.

Use the keyword "free sftp server download" in google to find out more.

You can use the coreftp server .

http://www.coreftp.com/server/

HTH

Sachin Garg

[sachinga.hcl · Accepted solution]

Hi Friend,

Kindly update the status. If your issue resolved.

Kind Regards,

Sachin Garg