Generate an SSH private key from the CLI
Full book title 469
Generate an SSH private key from the CLI
1. Generate the SSH V1 private key using the genkey command as follows:
genkey <keybits> <filename> -ssh1
where:
<keybits>
Is one of the following values; 384, 512, 768, 1024, 1536 or 2048.
<filename>
Is the name for the file, such as privssh1.pem, as described for the web version of this
procedure.
2. Generate the SSH V2 private key using the genkey command as in step 1, but this time, omit
the –ssh1 switch. For example:
genkey 1024 privssh2.pem.
3. Set the first private key as the SSH Host key 1 using the following command:
ssh 0 hostkey1 privssh1.pem
4. Set the second private key as SSH Host Key 2 using the following command:
ssh 0 hostkey2 privssh2.pem
5. Save the configuration:
config 0 save
SSH Authentication with a public/private key pair
Once SSH access has been configured and confirmed to be working, RSA key pair authentication
can be added and used to replace password authentication.
This process will involve the use of PuTTYgen to create public and private keys. For full details on
how to perform this procedure, see Quick Note 010, SSH access using RSA key authentication on
www.digi.com.