Destroying A Local Key Pair; Configuring A Peer Public Key; Importing A Peer Host Public Key From A Public Key File - HP 5920 Series Configuration Manual

Destroying a local key pair

To avoid key compromise, destroy a local key pair and generate a new pair after an intrusion event has
occurred, the storage media of the device is replaced, the key pair has been used for a long time, or the
local certificate has expired. For more information about the local certificate, see
To destroy a local key pair:
Step
1. Enter system view.
2. Destroy a local key pair.

Configuring a peer public key

To encrypt information sent to a peer device or authenticate the digital signature of the peer device, you
must configure the public key of the peer device on the local device.
Table 8 Peer public key configuration methods
Method
Import the peer public key
from a public key file
(recommended)
Manually enter (type or copy)
the peer public key
For information about displaying or exporting host public keys, see
HP recommends that you configure no more than 20 peer public keys on the device.

Importing a peer host public key from a public key file

Step
1. Enter system view.
2. Import a peer host public key
from a public key file.
Command
system-view
public-key local destroy { dsa | ecdsa | rsa } [ name
key-name ]
Prerequisites
3. Save the host public key in a file
on the peer device.
4. Get the file from the peer device,
for example, by using FTP or
TFTP in binary mode.
Display and record the public key on
the peer device.
IMPORTANT:
If the peer device is an HP device, use
the display public-key local public
command to display the public key.
The format of the public key displayed
in any other way might be incorrect.
Command
system-view
public-key peer keyname import sshkey
filename
112
"Configuring
Remarks
The system automatically converts the
imported public key to a string in the
Public Key Cryptography Standards
(PKCS) format.
•
If the key is not in the correct
format, the system discards the key
and displays an error message. If
the key is valid, for example, the
key displayed by the display
public-key local public command,
the system saves the key.
•
Always use the first method if you
are not sure of the format of the
recorded public key.
"Distributing a local host public
Remarks
N/A
By default, no peer host
public key exists.
PKI."
key."