Users Guide

Security Commands 1181
SSH Commands
Dell EMC Networking N1100-ON/N1500/N2000/N2100-ON/N2200-
ON/N3000-ON/N3100-ON/N3200-ON Series Switches
Management access to the switch is supported via telnet, SSH, or the serial
console. The Dell EMC Networking supports secure shell (SSH) and secure
sockets layer (SSL) to help ensure the security of network transactions.
Keys and certificates can be generated externally (that is, offline) and
downloaded to the target or generated directly by the Dell EMC Networking
switch.
crypto key generate dsa
Use the crypto key generate dsa command in Global Configuration mode to
generate DSA key pairs for the SSH server. A key pair is one public DSA key
and one private DSA key. Use the crypto key zeroize command to remove the
generated private key from the local file system. The public and private keys
will be overwritten if the command is subsequently executed.
Syntax
crypto key generate dsa
Default Configuration
DSA key pairs do not exist. By default, 1024-bit DSA keys are generated.
Command Mode
Global Configuration mode
User Guidelines
DSA keys are generated in pairs: one public DSA key and one private DSA
key. These keys are used the encrypt communication with the switch when
using SSH or HTTPS. If your switch already has DSA keys when you issue this
command, you are warned and prompted to replace the existing keys. Existing
certificates generated from the previous keys will be invalidated.The keys are
not saved in the switch configuration; they are saved in the file system and