HP procurve switch 2600 series Access Security Manual page 110

Configuring Secure Shell (SSH)
Further Information on SSH Client Public-Key Authentication
Property Supported
Value
Key Format ASCII
Key Type RSA only
Maximum Supported 3072 bits
Public Key Length
Maximum Key Size 1024
characters
N o t e o n P u b l i c
K e ys
5-24
1. Use your SSH client application to create a public/private key pair. Refer
to the documentation provided with your SSH client application for
details. The switch supports the following client-public-key properties:
Comments
See figure 5-8 on page 5-13. The key must be one unbroken ASCII string. If you add
more than one client-public-key to a file, terminate each key (except the last one)
with a <CR><LF>. Spaces are allowed within the key to delimit the key's components.
Note that, unlike the use of the switch's public key in an SSH client application, the
format of a client-public-key used by the switch does not include the client's IP
address.
Shorter key lengths allow faster operation, but also mean diminished security.
Includes the bit size, public index, modulus, any comments, <CR>, <LF>, and all blank
spaces.
If necessary, you can use an editor application to verify the size of a key. For example,
placing a client-public-key into a Word for Windows text file and clicking on File |
Properties | Statistics, lets you view the number of characters in the file, including
spaces.
2. Copy the client's public key into a text file (filename.txt). (For example,
you can use the Notepad editor included with the Microsoft® Windows®
software. If you want several clients to use client public-key authentica
tion, copy a public key for each of these clients (up to ten) into the file.
Each key should be separated from the preceding key by a <CR><LF>.
3. Copy the client-public-key file into a TFTP server accessible to the switch.
Copying a client-public-key into the switch requires the following:
■ One or more client-generated public keys. Refer to the documentation
provided with your SSH client application.
■ A copy of each client public key (up to ten) stored in a single text file
or individual on a TFTP server to which the switch has access.
Terminate all client public-keys in the file except the last one with a
<CR><LF>.
The actual content of a public key entry in a public key file is determined by
the SSH client application generating the key. (Although you can manually add
or edit any comments the client application adds to the end of the key, such
as the smith@fellow at the end of the key in figure 5-14 on page 5-23.)