Crypto; Overview; Command Structure - HP ProCurve 5400zl Reference Manual

OVERVIEW

Category:
Primary context:
Related Commands
Usage: crypto host-cert generate self-signed [START END CNAME OU ORG
crypto host-cert zeroize
crypto key generate <ssh [rsa] | cert [rsa] KEYSIZE | autorun-key [rsa]>
crypto key zeroize <ssh | cert | autorun>
Description: Install or remove authentication files for ssh or https server
Parameters:
o host-cert - operation on the https host certificate file. The host
o key - operation on an ssh or https rsa key file.
o generate - install new key or self-signed certificate.
o zeroize - remove an existing key or certificate file.
o self-signed - install new self-signed certificate.
o START - certificate will be valid beginning on this date.
o END - certificate will be valid until this date.
o CNAME - the name (IP address) of this device.
o OU - organizational unit or department.
o ORG - organization name.
o CITY - city or location.
o STATE - state or region.
o COUNTRY - two character ISO country code.
o ssh - Install/remove host key for ssh server.
o cert - Install/remove rsa key for https certificate.
o autorun-key - Install/remove rsa key for autorun.
o rsa - optional keyword indicating key type (only rsa is available).
o KEYSIZE - for a certificate key, the size of the key desired.

COMMAND STRUCTURE

■ crypto

host-cert
generate
■
self-signed
■
start-date
■
■
© 2009 Hewlett-Packard Development Company, L.P.
SSH
config
the section called crypto" (page 544)
autorun (page 68)
or for autorun
certificate file cannot be created before the certificate
rsa key file has been created.
Note: installing a new key may be very slow in the first few
minutes after booting the device.
provide a list of all valid country codes beginning with
the letter x.
Certificate keys may be 512, 768, or 1024 bits.
keys are always 896 bits.)
-- Install/remove self-signed certificate for https.
-- Create a self-signed certificate for the https server.
-- Create a self-signed certificate for the https server.
-- Validity start date for certificate. (MM/DD[/[YY]YY])
end-date -- Validity end date for certificate. (MM/DD[/[YY]YY])
CITY STATE COUNTRY]
Typing 'x<TAB>' will
(Ssh host
(p. 146)
(p. 146)
(p. 148)
crypto
(p. 148)
(p. 146)
138