R3303-HP HSR6800 Routers Security Command Reference

230
Table 30 Default local key pair names
T
yp
e Default name
RSA
• Host key pair: hostkey
• Server key pair: serverkey
DSA dsakey
Usage guidelines
When using this command to create DSA or RSA key pairs, you are asked to provide the length of the key
modulus. The modulus length is in the range of 512 to 2048 bits, and defaults to 1024 bits.
In FIPS mode, the DSA key modulus length is at least 1024 bits, and the RSA key modulus length must be
2048 bits.
Examples
# Create a local RSA key pair using the default name.
<Sysname> system-view
[Sysname] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++
+++++++
+++++++++
+++
# Create a local DSA key pair using the default name.
<Sysname> system-view
[Sysname] public-key local create dsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++.++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# Create a local RSA key pair named rsa1.
<Sysname> system-view
[Sysname] public-key local create rsa name rsa1
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.