HP VPN Firewall Appliances VPN Command Reference

151
[Sysname-pkey-key-code]EF8F999C01EC94E5760A079BD73E4F4D97F3500EDB308C29481B77E719D164
3135877E13B1C531B4
[Sysname-pkey-key-code]FF1877A5E2E7B1FA4710DB0744F66F6600EEFE166F1B854E2371D5B952ADF6
B80EB5F52698FCF3D6
[Sysname-pkey-key-code]1F0C2EAAD9813ECB16C5C7DC09812D4EE3E9A0B074276FFD4AF2050BD4A9B1
DDE675AC30CB020301
[Sysname-pkey-key-code]0001
[Sysname-pkey-key-code] public-key-code end
[Sysname-pkey-public-key]
Related commands
• public-key peer
• public-key-code begin
public-key local create
Use public-key local create to create local asymmetric key pairs. The created local key pairs are
automatically saved, and can survive a reboot.
Syntax
public-key local create { dsa | rsa }
Default
No asymmetric key pair is created.
Views
System view
Default command level
2: System level
Parameters
dsa: Specifies a DSA key pair.
rsa: Specifies an RSA key pair.
Usage guidelines
When using this command to create DSA or RSA key pairs, you are asked to provide the length of the key
modulus. The modulus length is in the range of 512 to 2048 bits, and defaults to 1024 bits. If the type of
key pair already exists, the system asks you whether you want to overwrite it.
The system supports up to 20 local asymmetric key pairs.
In FIPS mode, the modulus length of a DSA key pair is at least 1024 bits, and that of an RSA key pair must
be 2048 bits.
Examples
# Create local RSA key pairs.
<Sysname> system-view
[Sysname] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.