Syntax
crypto key generate dsa
Default Configuration
DSA key pairs do not exist.
Command Mode
Global Configuration mode
User Guidelines
DSA keys are generated in pairs: one public DSA key and one private DSA key. If the device already has DSA keys, a
warning and prompt to replace the existing keys with new keys is displayed.
The maximum supported size for the DSA key is 1,024.
This command is not saved in the startup configuration; however, the keys generated by this command are saved in the
running configuration, which is never displayed to the user or backed up to another device.
This command may take a considerable period of time to execute.
DSA key size is 2048 bits.
Example
The following example generates DSA key pairs.
Console (config)# crypto key generate dsa
21.4 crypto key generate rsa
The crypto key generate rsa global configuration command generates RSA key pairs.
Syntax
crypto key generate rsa
Default Configuration
RSA key pairs do not exist.
Command Mode
Global Configuration mode
User Guidelines
RSA keys are generated in pairs: one public RSA key and one private RSA key. If the device already has RSA keys, a
warning and prompt to replace the existing keys with new keys is displayed.
The maximum supported size for the RSA key is 2048 bits.
This command is not saved in the startup configuration; however, the keys generated by this command are saved in the
running configuration, which is never displayed to the user or backed up to another device.
This command may take a considerable period of time to execute.
Example
The following example generates RSA key pairs.
Console (config)# crypto key generate rsa
3.22.5 ip ssh pubkey-auth
The ip ssh pubkey-auth global configuration command enables public key authentication for incoming SSH sessions.
To disable this function, use the no form of this command.
Syntax
ip ssh pubkey-auth
no ip ssh pubkey-auth
Default Configuration
The function is disabled.
124