Generate Private Keys - Digi TransPort WR11 User Manual

Performing device administration tasks

Generate private keys

You must create a private key before a certificate can be requested, as the request uses this private
key.
É
Web
Go to Administration > X.509 Certificate Management > Key Generation.
The Key Generation settings generate a private key. Fields in this section are as follows:
Key filename
A name for the private key. The filename must be prefixed with priv and have a .pem extension.
Key size
The size of the private key, in bits. The larger the key, the more secure the connection. But also, the
larger the key, the slower the connection. The key size can be one of the following: 384, 512, 768,
1024, 1536, 2048.
Save in SSHv1 format
If enabled, generates the private key in SSH version 1 format. If disabled, generates the private key in
SSH version 2 format.
Generate Key button
Generates the private key.
Command line
Use the genkey command to generate a private key file.
genkey 0 <keysi ze> <f i l enam e> <- ssh1>
where:
<keysize> is the size of the key in bits.
n
<filename> is the name of the private key file.
n
<-ssh1> is optional, and will generate the private key file in SSH version 1 format.
n
Note IPsec requires SSH version 2 private keys.
For example, to generate a 1024-bit SSH version 2 key called privkey.pem, enter:
genkey 1024 pr i vkey. pem
Command output is:
Digi TransPort® Routers User Guide
Manage X.509 certificates and host key pairs
929