crypto otp 571
Note: On an WX switch that handles communications to and from
Microsoft Windows clients, use a one-time password of 31 characters
or fewer.
The following characters cannot be used as part of the one-time
password of a PKCS #12 file:
Quotation marks (“ ”)
Question mark (?)
Ampersand (&)
Defaults — None.
Access — Enabled.
History —Introduced in MSS Version 3.0. Webaaa option renamed to
web in MSS Version 4.1.
Usage — The password allows the public-private key pair and certificate
to be installed together from the same PKCS #12 object file. MSS erases
the one-time password after processing the crypto pkcs12 command or
when you reboot the WX switch.
3Com recommends that you create a password that is memorable to you
but is not subject to easy guesses or a dictionary attack. For best results,
create a password of alphanumeric uppercase and lowercase characters.
Examples — The following command creates the one-time password
hap9iN#ss for installing an EAP certificate and key pair:
WX4400# crypto generate otp eap hap9iN#ss
OTP set
See Also
crypto pkcs12 on page 572