Configuring A Client's Host Public Key - HP 5920 Series Configuration Manual

Step
3. Set the login authentication
mode to scheme.

Configuring a client's host public key

If the server uses publickey authentication to authentication a client, it compares the SSH username and
host public key that it receives from the client with those locally saved. If the information is consistent, it
verifies the digital signature that the client sends. The client generates the digital signature by using the
private key that is associated with the client's host public key.
For SSH servers that use publickey authentication, password-publickey authentication, or any
authentication, you must configure the client's DSA, RSA, or ECDSA host public key on the server, and
specify the corresponding host private key on the client to generate the digital signature. This makes the
client pass publickey authentication with the correct digital signature. If the device serves as a client,
corresponding host private key is specified by the specified public key algorithm.
You can manually configure the host public key of an SSH client on the server, or import it from the public
key file:
Manually configuring the host public key—You can type or copy the client's host public key from
•
the client to the SSH server. The host public key must be in the DER encoding format without being
converted.
If you use the device to act as the client, you can use the display public-key local public command
to display the host public key and copy its contents to the server. A host public key obtained in
other ways might be in incorrect format and cannot be saved on the server. HP recommends that
you import a client's host public key from the public key file of the client.
Importing the host public key—You can upload the client's public key file (in binary) to the server,
•
for example, through FTP or TFTP, and import the host public key from the public key file. During the
import process, the server automatically converts the host public key in the public key file to a string
in PKCS format.
HP recommends that you configure no more than 20 SSH client host public keys on an SSH server.
To manually configure a client's host public key:
Step
1. Enter system view.
2. Enter public key view.
3. Configure a client's host
public key.
Command
authentication-mode scheme
Command
system-view
public-key peer keyname
Enter the content of the host public
key
275
Remarks
By default, the authentication
mode is password.
For more information about this
command, see Fundamentals
Command Reference.
Remarks
N/A
N/A
When you enter the content for a
host public key, you can use
spaces and carriage returns
between characters. When you
save the host public key, spaces
and carriage returns are removed
automatically.
For more information, see
"Managing public keys."