Administrator Guide

Security Commands 1078
Enclose the key string is quotes. The Key String is the contents of the public key
in uu-encoded format.
Example
The following example configures a public key for administrator bob, enables
the SSH server, and enables public key authentication over SSH..
console#configure
console(config)#crypto key pubkey-chain ssh user-key bob rsa
console(config-pubkey-key)#Key-String "ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAvChaxFl4sMoWMZAAwtx/pcVb1jY6moer3CT231M47dgZDPFJ
1qf7/fuDwmES72FmIJAqq8cTUfT55BrI0r3vk05QJu0nnhcNjW6c98mNL9wxfx7TWybySs3zJJpS
NhcZ9JM+OJ104n4oS4izIzY7NSSNa+LQgq5j0mw9jdITY8SicImenLCjluILrpi6YA9WtC9RHGpi
xLzIRFQ/Kmf5SWcXiSRft4gUJP7Xp69SF3VAAuoUFQove5RMr6paLXUiZfwzDkHA8F4WHaDyHCtx
ESLXnZuQQjCiowll8Q2Nq5YXnu/ZEUJTyof1Uc8S13aP2rr+6NdzbN6khBmSSgQnVw==
jmclendo@xl-rtp-02"
console(config-pubkey-key)#exit
console(config)#ip ssh server
console(config)#ip ssh pubkey-auth
crypto key zeroize pubkey-chain
Use the crypto key zeroize pubkey-chain command in Global Configuration
mode to erase all public key chains or the public key chain for a user.
Syntax
crypto key zeroize pubkey-chain ssh [user-key username ]
Default Configuration
There is no default configuration for this command.
Command Mode
Global Configuration mode.
User Guidelines
The SSH server requires the public and private keys RSA/DSA keys to
operate.
Example
console(config)#crypto key zeroize pubkey-chain ssh username bob
2CSNXXX_SWUM204.book Page 1078 Monday, January 25, 2016 1:25 PM