The switch (stack) can have multiple certificates using the same base identity but with different protocol usage. This profile captures the common identity data for use in multiple certificates. The switch identity profile is a configuration aid that configures default values used when creating multiple certificates. This profile is not used for any other purpose and is therefore completely optional. The user can enter both subject information and one or more IP addresses when creating an Identity Profile. There is no constraint to have either subject or IP addresses, they are not mutually exclusive although at least one must be present.
Syntax:
(config)# [no] crypto pki [
identity-profile
][profile-name
] subject[CommonName <cn-value>] [Org <org-value> ] [OrgUnit <org-unit value>] [Locality <location-value>] [State <state-value>] [Country <country-code>]
Subject fields
The fields specific to certificate
subject
are obtained interactively by prompting the user for the following if they are not provided on the command line: