Exporting The Host Public Key In A Specific Format To A File; Destroying A Local Asymmetric Key Pair; Specifying The Peer Public Key On The Local Device - HP 6600 Security Configuration Manual

Exporting the host public key in a specific format to
a file
Step
1. Enter system view.
2. Export the local host public
key in a specific format to a
file.
After you export the host public key in a specific format to a file, transfer the file to the peer device.

Destroying a local asymmetric key pair

You might have to destroy a local asymmetric key pair and generate a new pair when an intrusion event
has occurred, the storage media of the device is replaced, the asymmetric key has been used for a long
time, or the local certificate expires. For more information about the local certificate, see "Configuring
PKI."
To destroy a local asymmetric key pair:
Step
1. Enter system view.
2. Destroy a local asymmetric key pair.

Specifying the peer public key on the local device

In SSH, to enable the local device to authenticate a peer device, specify the peer public key on the local
device. The device supports up to 20 peer public keys.
For information about displaying or exporting the host public key, see
host public key."
To specify the peer public key on the local device:
Method
Import the public key
from a public key file
(recommended)
Command
system-view
•
Export the RSA host public key:
public-key local export rsa
{ openssh | ssh1 | ssh2 }
filename
•
Export the DSA host public key:
public-key local export dsa
{ openssh | ssh2 } filename
Prerequisites
3. Save the host public key of the intended
asymmetric key pair in a file.
4. Transfer a copy of the file through FTP
or TFTP in binary mode to the local
device.
219
Remarks
N/A
Use at least one command.
Command
system-view
public-key local destroy { dsa | rsa }
"Displaying or exporting the local
Remarks
During the import process, the system
automatically converts the public key to
a string in Public Key Cryptography
Standards (PKCS) format.