Configuration Procedure; Distributing A Local Host Public Key - HPE FlexFabric 7900 Series Security Configuration Manual

•
The key modulus length must be appropriate (see
the higher the security, the longer the key generation time.
•
If you do not assign the key pair a name, the system assigns the default name to the key pair
and marks the key pair as default. You can also assign the default name to another key pair, but
the system does not mark the key pair as default.
•
The name of a key pair must be unique among all manually named key pairs that use the same
key algorithm, but can be the same as a key pair that uses a different key algorithm. If a name
conflict occurs, the system asks whether you want to overwrite the existing key pair.
•
The key pairs are automatically saved and can survive system reboots.
Table 5 A comparison of different types of asymmetric key algorithms
Type
RSA
DSA
ECDSA

Configuration procedure

To create a local key pair:
Step
1. Enter system view.
2. Create local DSA or RSA key
pairs.

Distributing a local host public key

You must distribute a local host public key to a peer device so the peer device can use the public key
to encrypt information sent to the local device or authenticate the digital signature signed by the local
device.
To distribute a local host public key:
1. Record the key or export the key to a file
2. Transfer the key, for example, by using FTP or TFTP
Generated key pairs
•
In non-FIPS mode:
One host key pair, if you specify a key pair
name.
One server key pair and one host key pair,
if you do not specify a key pair name.
Both key pairs use their default names.
•
In FIPS mode: One host key pair.
NOTE:
Only SSH 1.5 uses the RSA server key pair.
One host key pair.
One host key pair.
Command
system-view
public-key local create { dsa |
ecdsa | rsa } [ name key-name ]
Table 5). The longer the key modulus length,
Modulus length
•
In non-FIPS mode: 512 to 2048 bits,
1024 bits by default.
To ensure security, use a minimum of
768 bits.
•
In FIPS mode: 2048 bits.
•
In non-FIPS mode: 512 to 2048 bits,
1024 bits by default.
To ensure security, use a minimum of
768 bits.
•
In FIPS mode: 2048 bits.
192 bits.
58
Remarks
N/A
By default, no local key pair exists.