Configuring A Client Public Key - H3C S5500-EI series Operation Manual

Operation Manual – SSH
H3C S5500-EI Series Ethernet Switches

1.2.5 Configuring a Client Public Key

Note:
This configuration task is only necessary for SSH users using publickey authentication.
For an SSH user that uses publickey authentication to login, the server must be
configured with the client RSA or DSA host public key in advance, and the
corresponding private key for the client must be specified on the client.
You can manually configure or import the publickey public key from a public key file. In
the former case, you can manually copy the client's public key configuration to the
server. In the latter case, the system automatically converts the public key to a string
coded using the PKCS standard. Before importing the public key, you must upload the
public key file (in binary) to the server through FTP or TFTP.
Caution:
When the device functions as the SSH server, you cannot use Secure CRT 4.07 to
upload the client public key to the server.
You can configure at most 20 client pubic keys on an SSH server.
I. Configuring a client public key manually
Follow these steps to configure the client public key manually:
Enter system view
Enter public key view
Enter public key code
view
To do...
System-view
public-key peer
keyname
public-key-code begin
Use the command...
1-9
Chapter 1 SSH Configuration
Remarks
—
—
—