Destroying An Asymmetric Key Pair; Configuring A Peer Public Key - HP 5120 EI Switch Series Configuration Manual

To do...
Enter system view
Display the local RSA host public
key on the screen in a specified
format, or export it to a specified
file
Display the local DSA host public
key on the screen in a specified
format or export it to a specified
file

Destroying an asymmetric key pair

You may need to destroy an asymmetric key pair and generate a new pair when an intrusion event has
occurred, the storage media of the device is replaced, the asymmetric key has been used for a long time,
or the certificate from the Certificate Authority (CA) expires. To check the certificate status, use the display
pki certificate command. For more information about the CA and certificate, see the chapter ―PKI
configuration.‖
Follow these steps to destroy an asymmetric key pair:
To do...
Enter system view
Destroy an asymmetric key pair

Configuring a peer public key

To enable your local host to authenticate a peer, configure the peer RSA or DSA public key on the local
host. The following methods are available:
Import it from a public key file—Obtain a copy of the peer public key file through FTP or TFTP (in

binary mode) first, and then import the public key from the file. During the import process, the
system automatically converts the public key to a string in the Public Key Cryptography Standards
(PKCS) format. HP recommends that you follow this method to configure the peer public key.
 Configure it manually—If the peer is an HP device, you can use the display public-key local public
command to view and record its public key. On the local host, input or copy the key data in public
key code view. A public key displayed by other methods may not in the PKCS format, and the
system cannot save the format-incompliant key.
NOTE:
The device supports up to 20 peer pubic keys.
Follow these steps to import a peer host public key from the public key file:
To do...
Enter system view
Use the command...
system-view
public-key local export rsa {
openssh | ssh1 | ssh2 } [
filename ]
public-key local export dsa {
openssh | ssh2 } [ filename ]
Use the command...
system-view
public-key local destroy { dsa |
rsa }
Use the command...
system-view
181
Remarks
—
Select a command according to
the type of the key to be
exported.
Remarks
—
Required
Remarks
—