HP 12500 Series Configuration Manual page 223

checks the digital signature that the client sends. The digital signature is calculated by the client
according to the private key that corresponds to the host public key.
You must configure the client's DSA or RSA host public key on the server, and specify the corresponding
host private key on the client to generate the digital signature, so that the client can pass publickey
authentication with correct digital signature. If the device serves as a client, corresponding host private
key is specified by the specified public key algorithm.
Configuration guidelines
You can manually configure the public key of an SSH client on the server, or import it from the public key
file:
Configure it manually—You can type or copy the client's host public key from the client to the SSH
•
server. The host public key must be in the DER encoding format, which has not been converted.
• Import it from the public key file—You can upload the client's public key file (in binary) to the server,
for example, through FTP or TFTP, and import the host public key from the public key file. During the
import process, the server automatically converts the public key in the public key file to a string in
PKCS format.
Manually configured client host public keys must be in the specified format. If you use the device to act
as the client, you can use the display public-key local public command to view the host public key and
copy its contents to the server. A host public key obtained in other ways might be in incorrect format and
cannot be saved on the server. HP recommends you to import a client's host public key from the public
key file of the client.
You can configure up to 20 SSH client public keys on an SSH server.
For more information about client public key configuration, see
Configuration procedure
To configure a client's host public key manually:
Step
1. Enter system view.
2. Enter public key view.
3. Enter public key code view.
4. Configure a client's host
public key.
5. Return to public key view and
save the configured host
public key.
6. Return to system view.
To import a client's host public key from a public key file:
Step
1. Enter system view.
2. Import a client's public key from a
public key file.
Command
system-view
public-key peer keyname
public-key-code begin
Enter the content of the host public
key
public-key-code end
peer-public-key end
Command
system-view
public-key peer keyname import sshkey filename
213
"Managing public keys."
Remarks
N/A
N/A
N/A
Spaces and carriage returns are
allowed between characters.
When you exit public key code
view, the system automatically
saves the public key.
N/A