Displaying Or Exporting The Local Rsa Or Dsa Host Public Key; Destroying An Asymmetric Key Pair; Configuring The Public Key Of A Peer - HP 4800G Series Configuration Manual

24/48 port
Table of Contents

Advertisement

Configuration of the public-key local create command can survive a reboot.
The public-key local create rsa command generates two key pairs: one server key pair and one
host key pair. Each key pair consists of a public key and a private key.
The length of an RSA key modulus is in the range 512 to 2048 bits. After entering the public-key
local create rsa command, you will be required to specify the modulus length. For security, a
modulus of at least 768 bits is recommended.
The public-key local create dsa command generates only one key pair, that is, the host key pair.
The length of a DSA key modulus is in the range 512 to 2048 bits. After entering the public-key
local create dsa command, you will be required to specify the modulus length. For security, a
modulus of at least 768 bits is recommended.

Displaying or Exporting the Local RSA or DSA Host Public Key

You can display the local RSA or DSA host public key on the screen or export it to a specified file, so as
to configure the local RSA or DSA host public key on the remote end.
Follow these steps to display or export the local RSA or DSA host public key:
Enter system view
Display the local RSA host public key
on the screen in a specified format, or
export it to a specified file
Display the local DSA host public key
on the screen in a specified format, or
export it to a specified file

Destroying an Asymmetric Key Pair

An asymmetric key pair may expire or leak. In this case, you need to destroy it and generate a new pair.
Follow these steps to destroy an asymmetric key pair:
To do...
Enter system view
Destroy an asymmetric key pair

Configuring the Public Key of a Peer

To authenticate the remote host, you need to configure the RSA or DSA public key of that peer on the
local host.
To configure the public key of the peer, you can:
Configure it manually: You can input on or copy the public key of the peer to the local host.
To do...
system-view
public-key local destroy { dsa | rsa }
Use the command...
system-view
public-key local export rsa
{ openssh | ssh1 | ssh2 }
[ filename ]
public-key local export dsa
{ openssh | ssh2 } [ filename ]
Use the command...
1-3
Remarks
Select a command
according to the
type of the key to
be exported.
Remarks
Required

Advertisement

Chapters

Table of Contents
loading

Table of Contents