HP FlexFabric 7900 Series Command Reference Manual page 105

Usage guidelines
The key algorithm must be the same as required by the security application.
The key modulus length must be appropriate (see
higher the security, and the longer the key generation time.
If you do not assign the key pair a name, the system assigns the default name to the key pair and marks
the key pair as default. You can also assign the default name to another key pair, but the system does not
mark the key pair as default.
The name of a key pair must be unique among all manually named key pairs that use the same key
algorithm, but can be the same as a key pair that uses a different key algorithm. If a name conflict occurs,
the system asks whether you want to overwrite the existing key pair.
The key pairs are automatically saved and can survive system reboots.
Table 16 A comparison of different types of asymmetric key pairs
Type
RSA
DSA
ECDSA
NOTE:
Only SSH 1.5 uses the RSA server key pair.
Examples
# Create local RSA key pairs with default names.
<Sysname> system-view
[Sysname] public-key local create rsa
The range of public key modulus is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
...++++++
Number of key pairs
•
In non-FIPS mode:
If you specify a key pair name, the
command creates a host key pair.
If you do not specify a key pair
name, the command creates one
server key pair and one host key
pair, and both key pairs use their
default names.
•
In FIPS mode:
If you do not specify a key pair name,
the command creates a host key pair.
The command only creates one host key
pair.
The command only creates one host key
pair.
Table 16). The longer the key modulus length, the
Modulus length
•
In non-FIPS mode:
The value range is
512 to 2048 and
the default is1024,
in bits.
•
In FIPS mode:
2048 bits.
•
In non-FIPS mode:
The value range is
512 to 2048 and
the default is1024,
in bits.
•
In FIPS mode:
2048 bits.
192 bits.
98
HP recommendation
At least 768 bits
At least 768 bits
N/A