Generate Ssh Private Keys - Digi TransPort WR11 User Manual

Configuring Secure Shell (SSH) server and client

Generate SSH private keys

To fully configure SSH, you must generate a version1 SSH key and a version 2 SSH key and configure
the router to use them, described in the following topics.
Note SSH version 2 is more secure than version 1 and so is the recommended version to use.
However, some SSH clients may only support version 1 keys and so the router supports both version 1
and version 2 SSH.
É
Web
1. Go to Administration > X.509 Certificate Management > Key Generation.
2. Select the size of the key file from the drop-down list. The larger the key file, the more secure it
will be.
3. In the Key filename setting, enter the name for the key file, or select one of any existing key
files. The filename should have a prefix of priv and a file extension of .pem, such as
privssh1.pem. The 8.3 file name convention applies to key files.
4. Check the checkbox marked Save in SSHv1 format to generate a version 1 SSH key. Click the
Generate Key button to generate the private key file. The key file is then stored in the router's
FLASH filing system.
5. To generate the second key, repeat steps 1 through 3. This time, make sure that the
Save in SSHv1 format checkbox is unchecked. Give this key file a different name than the
version 1 file previously generated.
6. On the Configuration > Network > SSH Server > SSH Server n page, enter the filename
generated in step 3 into the Host Key 1 Filename text box and the filename generated in step
4 into the Host Key 2 Filename text box.
7. Click the Apply button at the bottom of the page to apply changes. When the
Configuration successfully applied message is displayed, click on the highlighted link to save
the configuration.
Command line
1. Generate the SSH V1 private key using the genkey command as follows:
genkey <keybi t s> <f i l enam e> - ssh1
where:
<keybits>
Is one of the following values; 384, 512, 768, 1024, 1536 or 2048.
<filename>
Is the name for the file, such as privssh1.pem, as described for the web version of this
procedure.
Digi TransPort® Routers User Guide
Generate SSH private keys
553