To generate a host certificate from the CLI:

Generate a certificate key pair. This is done with the crypto key generate cert command. The default key size is 512.

NOTE:

If a certificate key pair is already present in the switch, it is not necessary to generate a new key pair when generating a new certificate. The existing key pair may be reused and the crypto key generate cert command does not have to be executed.