Administrator Guide

Security Commands 1077
User Guidelines
RSA keys are generated in pairs: one public RSA key and one private RSA key.
These keys are used to encrypt communication with the switch when using
SSH.If your switch already has RSA keys when you issue this command, you
are warned and prompted to replace the existing keys. The keys are not saved
in the switch configuration; they are saved in the file system and the private
key is never displayed to the user. RSA keys, along with other switch
credentials, are distributed to all units in a stack on a configuration save.
Use the crypto key zeroize rsa command to remove private RSA keys from the
system.
Private keys should never be shared with unauthorized users.
Example
The following example generates RSA key pairs.
console(config)#crypto key generate rsa
crypto key pubkey-chain ssh
Use the crypto key pubkey-chain ssh command in Global Configuration
mode to enter public key configuration mode in order to manually specify
public keys such as SSH client public keys for an individual user..
Syntax
crypto key pubkey-chain ssh user-key username rsa/dsa
Default Configuration
By default, this command has no public keys configured.
Command Mode
Global Configuration mode
User Guidelines
This public key is used to authenticate an administrator to the switch when using
SSH. This avoids the need for the administrator to enter a password on every
login.
2CSNXXX_SWUM204.book Page 1077 Monday, January 25, 2016 1:25 PM