diff --git a/content/cumulus-linux-511/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md b/content/cumulus-linux-511/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md index aa9256936f..21ae4e7613 100644 --- a/content/cumulus-linux-511/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md +++ b/content/cumulus-linux-511/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md @@ -69,13 +69,13 @@ You can import certificates onto the switch (fetch certificates from an external {{%/notice%}} - To import an entity certificate, run an `nv action import system security certificate `command. -- To import a CA certificate, run an `nv action import system security ca-certificate ` command. +- To import a CA certificate bundle file, run an `nv action import system security ca-certificate ` command. If the certificate is passphrase protected, you need to include the passphrase. You must provide a certificate ID (``) to uniquely identify the certificate you import. -The following example imports a CA certificate with a public key and calls the certificate `tls-cert-1`. The certificate is passphrase protected with `mypassphrase`. The public key is a Base64 ASCII encoded PEM string. +The following example imports a CA certificate bundle with a public key and calls the certificate `tls-cert-1`. The certificate is passphrase protected with `mypassphrase`. The public key is a Base64 ASCII encoded PEM string. {{%notice note%}} - You must enclose the public key in the NVUE command with three double quotes (`""""""`). @@ -86,7 +86,7 @@ The following example imports a CA certificate with a public key and calls the c cumulus@switch:~$ nv action import system security ca-certificate tls-cert-1 passphrase mypassphrase data """"""  ``` -The following example imports an entity certificate bundle and calls the certificate `tls-cert-1`. The certificate bundle is passphrase protected with `mypassphrase`. +The following example imports an entity certificate and calls the certificate `tls-cert-1`. The certificate is passphrase protected with `mypassphrase`. A certificate bundle must be in .PFX or .P12 format. diff --git a/content/cumulus-linux-512/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md b/content/cumulus-linux-512/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md index 26ca406d4f..21ae4e7613 100644 --- a/content/cumulus-linux-512/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md +++ b/content/cumulus-linux-512/System-Configuration/NVIDIA-User-Experience-NVUE/NVUE-API.md @@ -69,24 +69,24 @@ You can import certificates onto the switch (fetch certificates from an external {{%/notice%}} - To import an entity certificate, run an `nv action import system security certificate `command. -- To import a CA certificate, run an `nv action import system security ca-certificate ` command. +- To import a CA certificate bundle file, run an `nv action import system security ca-certificate ` command. If the certificate is passphrase protected, you need to include the passphrase. You must provide a certificate ID (``) to uniquely identify the certificate you import. -The following example imports a CA certificate with a public key and calls the certificate `tls-cert-1`. The certificate is passphrase protected with `mypassphrase`. The public key is a Base64 ASCII encoded PEM string. +The following example imports a CA certificate bundle with a public key and calls the certificate `tls-cert-1`. The certificate is passphrase protected with `mypassphrase`. The public key is a Base64 ASCII encoded PEM string. {{%notice note%}} - You must enclose the public key in the NVUE command with three double quotes (`""""""`). -- With the REST API, you must enclose the public key with double quotes (`""`). +- With the REST API, you must enclose the public key with one double quote (`""`). {{%/notice%}} ``` cumulus@switch:~$ nv action import system security ca-certificate tls-cert-1 passphrase mypassphrase data """"""  ``` -The following example imports an entity certificate bundle and calls the certificate `tls-cert-1`. The certificate bundle is passphrase protected with `mypassphrase`. +The following example imports an entity certificate and calls the certificate `tls-cert-1`. The certificate is passphrase protected with `mypassphrase`. A certificate bundle must be in .PFX or .P12 format. @@ -106,7 +106,7 @@ cumulus@switch:~$ nv action import system security certificate tls-cert-1 uri-pu You can configure the NVUE REST API to use a specific certificate. -The following example configures the API to use the certificate `tls-cert-1`: +The following example configures the API to use the certificate or CA bundle named `tls-cert-1`: ``` cumulus@switch:~$ nv set system api certificate tls-cert-1