HP 3500yl Series Access Security Manual page 389

Comment
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKzbhu89Lp5vmpuDwHmynUDnaBPPDtL9J8zcr4BLXi
k8G7VoMGghxJisLewYjFFUVVSOha8XCCGh4aVCur/HllP1enMGMGl/fu42oYDobmfgf/kJCK6U527rEU
gc+1VjxebjRGA5j0Bs8R2xo2k5ty6ZciMnDoEBeRcuoxd58dwzy7kU5hjQHSkubgwBBHYv7vmLtY0dPz
RHIRSoEezm5jFDhtF2EuubuB9adA43hggmKqciZZ8EfiOmKE9QwQCWLw2vUnXLhfFhxYwo7CoTir4yJA
1ITSYFTrDd0G/pD67VfToz9DeHO163Yl9ukQQNXGES0LRK+8I1SZO33smith@support.cairns.com
Figure 8-13. Example of a Client Public Key
Notes
Property Supported
Value
Key Format ASCII
Key Type RSA or
DSA
Maximum Supported 3072 bits
Public Key Length
Maximum Host Key RSA:
Sizes In Bits
1024, 2048,
3072
DSA:
1024
Public Key
Comments in public key files, such as smith@support.cairns.com in figure 8-13,
may appear in a SSH client application's generated public key. While such
comments may help to distinguish one key from another, they do not pose any
restriction on the use of a key by multiple clients and/or users.
Public key illustrations such as the key shown in figure 8-13 usually include
line breaks as a method for showing the whole key. However, in practice, line
breaks in a public key will cause errors resulting in authentication failure.
1. Use your SSH client application to create a public/private key pair. Refer
to the documentation provided with your SSH client application for
details. The switch supports the following client-public-key properties:
Comments
See figure 8-7 on page 8-13. The key must be one unbroken ASCII string. If you add
more than one client-public-key to a file, terminate each key (except the last one)
with a <CR><LF>. Spaces are allowed within the key to delimit the key's components.
Note that, unlike the use of the switch's public key in an SSH client application, the
format of a client-public-key used by the switch does not include the client's IP
address.
You can choose either RSA or DSA key types when using the crypto key generate
ssh command. The cert and autorun parameters only use RSA key types.
Shorter key lengths allow faster operation, but also mean diminished security.
Includes the bit size, public index, modulus, any comments, <CR>, <LF>, and all blank
spaces.
If necessary, you can use an editor application to verify the size of a key. For example,
placing a client-public-key into a Word for Windows text file and clicking on File |
Properties | Statistics, lets you view the number of characters in the file, including
spaces.
Further Information on SSH Client Public-Key Authentication
Comment
Configuring Secure Shell (SSH)
8-27