Configuring A Client Public Key - H3C S7500E Series Operation Manual

Operation Manual – SSH
H3C S7500E Series Ethernet Switches

1.2.5 Configuring a Client Public Key

Note:
This configuration task is only necessary for SSH users using publickey authentication.
For an SSH user that uses publickey authentication to login, the server must be
configured with the client RSA host public key in advance, and the corresponding
private key for the client must be specified on the client.
You can manually configure or import the publickey public key from a public key file. In
the former case, you can manually copy the client's public key configuration to the
server. In the latter case, the system automatically converts the public key to a string
coded using the PKCS standard. Before importing the public key, you must upload the
public key file (in binary) to the server through FTP or TFTP.
Caution:
When the device functions as the SSH server, you cannot use Secure CRT 4.07 to
upload the client public key to the server.
You can configure at most 20 client pubic keys on an SSH server.
I. Configuring a client public key manually
Follow these steps to configure the client public key manually:
Enter system view
Enter public key view
Enter public key code
view
Configure a client
public key
To do...
System-view
public-key peer keyname
public-key-code begin
Enter the content of the
public key
Use the command...
1-8
Chapter 1 SSH Configuration
Remarks
—
—
—
Required
The content must be a
hexadecimal string that is
generated randomly by
the SSH-supported client
software and coded
compliant to PKCS.
Spaces and carriage
returns are allowed
between characters.