pvk is just a string meaning private key. But pem is a format.
Snippet from http://en.wikipedia.org/wiki/X.509 Common filename extensions for X.509 certificates are: - .pem - (Privacy Enhanced Mail<http://en.wikipedia.org/wiki/Privacy_Enhanced_Mail>) Base64 <http://en.wikipedia.org/wiki/Base64> encoded DER certificate, enclosed between "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" - .cer, .crt, .der - usually in binary DER<http://en.wikipedia.org/wiki/Distinguished_Encoding_Rules>form, but Base64-encoded certificates are common too (see .pem above) - .p7b, .p7c - PKCS#7 <http://en.wikipedia.org/wiki/PKCS7> SignedData structure without data, just certificate(s) or CRL(s) - .p12 - PKCS#12 <http://en.wikipedia.org/wiki/PKCS12>, may contain certificate(s) (public) and private keys (password protected) - .pfx - PFX, predecessor of PKCS#12 (usually contains data in PKCS#12 format, e.g., with PFX files generated in IIS<http://en.wikipedia.org/wiki/Internet_Information_Services> ) With regards Kings On Tue, Aug 9, 2011 at 11:27 PM, Mark Senteza <[email protected]>wrote: > When generating a new request for a certificate on ACS under "System > Configuration > ACS Certificate Setup ", what is the correct file extension > that we should use to define the private key file ? > > I've seen .pvk, .pem, and .key being used before. > > Cisco states, and I quote: > > Generating a Certificate Signing Request *Step 4 *In the Private key file > box, type the full directory path and name of the file in which the private > key is saved, for example, c:\privateKeyFile*.pem*. > > and just further below that, they say: > Self-Signed Certificate Configuration Options > *Private key file*—The full path and filename for the private key file you > want to generate. For example, "c:\acs_server_cert\acs_server_cert*.pvk*". > When you submit this page, Cisco Secure ACS creates the private key file > using the location and filename you specify. > > > Does the file extension all depend on whether you are generating a > self-signed certificate or a certificate signing request ? > > > Mark > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
