Cisco MDS 9000 Series Configuration Manual page 182

Passwordless File copy and SSH
ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAxWmjJT+oQhIcvnrMbx2BmD
0P8boZElTfJFx9fexWp6rOiztlwODtehnjadWc6A+DE2DvYNvq
srU9TBypYDPQkR/+Y6cKubyFWVxSBG/NHztQc3+QC1zdkIxGNJ
bEHyFoajzNEO8LLOVFIMCZ2Td7gxUGRZc+fbqS33GZsCAX6v0=
bitcount:262144
fingerprint:
8d:44:ee:6c:ca:0b:44:95:36:d0:7d:f2:b5:78:74:7d
**************************************
could not retrieve dsa key information
**************************************
Shows the public key for the account (admin).
Step 5
switch(config)# username admin keypair export bootflash:key_rsa rsa
Example:
Enter Passphrase:
switch(config)# dir
951 Jul 09 11:13:59 2009 key_rsa
221 Jul 09 11:14:00 2009 key_rsa.pub
Exports the keypair from the user's (admin's) home directory to the bootflash memory.
The key pair (both public and private keys) will be exported to the specified location. The user will be prompted
to enter a Passphrase which will encrypt the private key. The private key will be exported as the file name
specified in the uri and the public key will be exported with the same file name followed by a ".pub" extension.
The user can now copy this key pair to any switch, and also copy the public file to the home directory of the
SCP server.
Step 6
switch(config)# username admin keypair import bootflash:key_rsa rsa
Example:
Enter Passphrase:
switch(config)# show username admin keypair
**************************************
rsa Keys generated: Thu Jul 9 11:10:29 2009
ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAxWmjJT+oQhIcvnrMbx2BmD
0P8boZElTfJFx9fexWp6rOiztlwODtehnjadWc6A+DE2DvYNvq
srU9TBypYDPQkR/+Y6cKubyFWVxSBG/NHztQc3+QC1zdkIxGNJ
bEHyFoajzNEO8LLOVFIMCZ2Td7gxUGRZc+fbqS33GZsCAX6v0=
bitcount:262144
fingerprint:
8d:44:ee:6c:ca:0b:44:95:36:d0:7d:f2:b5:78:74:7d
**************************************
could not retrieve dsa key information
**************************************
Imports the keypair to the home directory of the switch.
The uri given here must be the uri of the private key and the public should be present on the same location
with extension ".pub". The user will be prompted for the passphrase, and the same passphrase must be entered
as was used to encrypt the key.
Once the private keys are copied to the switches which need to do passwordless copy to a server, and that
server has the public key copied to its authorized_keys file in home directory, the user will be able to do
passwordless file copy and ssh to the server from the switches.
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
164
Configuring SSH Services