Creating A Local Asymmetric Key Pair; Displaying Or Exporting The Local Host Public Key - HP 10500 Series Configuration Manual

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

Creating a local asymmetric key pair

When you create an asymmetric key pair on the local device, follow these guidelines:
Create an asymmetric key pair of the proper type to work with a target application.
After you enter the command, specify a proper modulus length for the key pair. The following table
compares these types of key pairs.
Table 12 A comparison between different types of asymmetric key pairs
Type
RSA
DSA
IMPORTANT:
Only SSH1.5 uses the RSA server key pair.
To create a local asymmetric key pair:
Step
1.
Enter system view.
2.
Create a local
asymmetric key pair.

Displaying or exporting the local host public key

In some applications, such as SSH, to allow the local device to be authenticated by a peer device
through digital signature, you must display or export the local host public key, which is then specified on
the peer device.
To display or export the local host public key, choose one of the following methods:
Displaying and recording the host public key information
Displaying the host public key in a specific format and saving it to a file
Exporting the host public key in a specific format to a file
If the local device functions to authenticate the peer device, specify the peer public key on the local
device. For more information, see
Number of key pairs
Two key pairs, one server key pair and one
host key par. Each key pair comprises a
public key and a private key
One key pair, the host key pair
Command
system-view
public-key local create { dsa |
rsa }
"Specifying the peer public key on the local
Modulus length
512 to 2048 bits
1024 by default
512 to 2048 bits
1024 by default
Remarks
N/A
By default, no asymmetric key pair is
created.
Key pairs created with the public-key
local create command are saved
automatically and can survive system
reboots.
192
Remarks
To achieve high
security, specify at least
768 bits.
device."

Advertisement

Table of Contents
loading

Table of Contents