Access Security Guide K/KA/KB.15.15

MeaningMessage
command, the switch displays this message while it is
generating the key.
The switch key is missing or corrupt. Use the generate ssh
[dsa] [rsa]
Host RSA key file corrupt or not found. Use ' generate ssh
[dsa] [rsa]
command to generate a new key for the switch.to create new host key.
Logging messages
There are event log messages when a new key is generated and zeroized for the server:
ssh: New <num-bits> -bit [ rsa | dsa ] SSH host key installed
ssh: New SSH host key installed
There are also messages that indicate when a client public key is installed or removed:
ssh: <num-bits> [ rsa | dsa ] client public key [ installed |
removed ] ( [ manager | operator ] access) (key_comment)
NOTE: Only up to 39 characters of the key comment are included in the event log message.
Debug logging
To add ssh messages to the debug log output, enter this command:
HP Switch# debug ssh LOGLEVEL
where LOGLEVEL is one of the following (in order of increasing verbosity):
• fatal
• error
• info
• verbose
• debug
• debug2
• debug3
Viewing
Opening a secure session to an HP switch
To initiate an SSH client session to another network device, use the following command, executed
in the manager context.
Syntax:
ssh [ user <username | username@> ] <hostname | IPv4 | IPv6>
[ port <1-65535> ]
Enables an SSH client to open a secure session to an HP switch. Opening secure
sessions to devices other than HP switches is not supported.
[ user <username | username@> ]
Optional, the username on the destination (remote) system. Usernames for operator
and manager must be configured.
If <username@> is specified, enter the remote system information of either
hostname,IPv4 or IPv6 address.
246 Secure Shell (SSH)