What can I help you with?
NVIDIA NVOS User Manual for InfiniBand Switches v25.02.3000

Certificate Management Commands

nv show system security ca-certificate

Display owned CA certificates.

Syntax Description

N/A

Default

N/A

History

25.02.2002 25.02.30xx: Updated command output

Example

Copy
Copied!
            

admin@nvos:~$ nv show system security ca-certificate  Certificate ID Serial Number Valid From Valid To Summary -------------- --------------------------------- ------------------------- ------------------------- ------------------------ ca_id_168 43:69:66:63:11:75:31:00:95:03:96: 2025-02-18T16:06:37+02:00 2026-02-18T16:06:37+02:00 count: 1 Installed: nvue-rest-api

REST API

GET https://<ip>/nvue_v1/system/security/ca-certificate/

Related Commands

nv action import system security ca-certificate {cacert id}

Notes

nv show system security certificate

Display owned certificates.

Syntax Description

N/A

Default

N/A

History

25.02.2002

25.02.30xx: Updated command output

Example

Copy
Copied!
            

admin@nvos:~$ nv show system security certificate Certificate ID Serial Number Valid From Valid To Summary -------------- ------------------------- ------------------------- ------------------------- ------------------------ cert_id_396 5A:A6:4C:4A:8C:B8:9A:89:8 2025-02-18T16:06:37+02:00 2026-02-18T16:06:37+02:00 Installed: nvue-rest-api Installed: gnmi-server

REST API

GET https://<ip>/nvue_v1/system/security/ca-certificate/

Related Commands

nv action import system security certificate {cacert id}

Notes

nv action delete system security ca-certificate <cacert id>

Delete system security CA certificate.

Syntax Description

cacert id

CA certificate ID removed during import

Default

N/A

History

25.02.2002

Example

Copy
Copied!
            

admin@nvos:~$ nv action delete system security ca-certificate {cacert id}

REST API

DELETE https://<ip>/nvue_v1/system/security/ca-certificate/{cacert id}

Related Commands

nv action import system security ca-certificate {cacert id}

Notes

nv action delete system security certificate <cert id>

Delete system security CA certificate.

Syntax Description

cert id

Certificate ID removed during import

Default

N/A

History

25.02.2002

Example

Copy
Copied!
            

admin@nvos:~$ nv action delete system security certificate {cert id}

REST API

DELETE https://<ip>/nvue_v1/system/security/certificate/{cert id}

Related Commands

nv action import system security certificate {cert id}

Notes

nv action import system security ca-certificate <cacert id> <uri {remote-url} | data> <remote-url | cacert-data> [external-ca]

Import system security CA certificate bundle.

Syntax Description

cacert id

Unique CA Certificate ID that was named by the user

uri

A local/remote URI from where the certificate file (containing the public-key) can be retrieved.

Supports: ftp, scp and sftp

(e.g., scp://user[:password]@hostname/path/filename)

data

The raw data bytes (e.g., PEM string) of the CA certificates bundle.

remote-url

A local/remote URI from where the certificate file (containing the CA certificate bundle) can be retrieved.

external_ca

Optional parameter to import certificate without appending it to system CA certificates bundle at /etc/ssl/certs/ca-certificates.crt .

Default

N/A

History

25.02.2002

Example

Copy
Copied!
            

admin@nvos:~$ nv action import system security ca-certificate tls-cert-1 data "<CA-certificate>"

Copy
Copied!
            

admin@nvos:~$ nv action import system security ca-certificate tls-cert-1 uri scp://user:pass@1.2.3.4:/ca-cert.crt

Copy
Copied!
            

admin@nvos:~$ nv action import system security ca-certificate tls-cert-1 uri scp://user:pass@1.2.3.4:/ca-cert.crt external

REST API

POST https://<ip>/nvue_v1/system/security/ca-certificate/{cacert-id}

Related Commands

nv action delete system security ca-certificate {cacert-id}

nv show sys security ca-certificate

Notes

nv action import system security certificate <cert id> <uri {uri-public-key <remote-url> | uri-private-key <remote-url> | uri-bundle <remote-url>} | data>

Import system security certificate.

Syntax Description

passphrase

Optional passphrase if certificate bundle is passphrase protected

uri-bundle

A local/remote URI from where the certificate file containing the certificate bundle can be retrieved.

data

The raw data bytes (e.g., PEM string) of the certificates bundle

uri-public-key

A local/remote URI from where the public key file can be retrieved.

uri-private-key

A local/remote URI from where the private key file can be retrieved.

remote-url

A local/remote URI from where the certificate file (containing the CA certificate bundle) can be retrieved.

Default

N/A

History

25.02.2002

Example

Copy
Copied!
            

admin@nvos:~$ nv action import system security certificate tls-cert-1 passphrase mypassphrase uri-bundle scp://user:pass@1.2.3.4:/opt/certs/cert.p12 

Copy
Copied!
            

admin@nvos:~$ nv action import system security certificate tls-cert-1 uri-public-key scp://user:pass@1.2.3.4:/opt/certs/public uri-private-key scp://user:pass@1.2.3.4:/opt/certs/private

Copy
Copied!
            

admin@nvos:~$ nv action import system security certificate tls-cert-1 data "<CA-certificate>"

REST API

POST https://<ip>/nvue_v1/system/security/certificate/{cert-id}

Related Commands

nv action delete system security certificate {cert-id}

nv show sys security certificate

Notes

© Copyright 2025, NVIDIA. Last updated on Mar 19, 2025.