Default Settings for Keychain Management
This table lists the default settings for Cisco NX-OS keychain management parameters.
Table 36: Default Keychain Management Parameters
Default
Parameters
No keychain exists by default.
Key chains
No keys are created by default when you create a new keychain.
Keys
Always valid.
Accept lifetime
Always valid.
Send lifetime
Unencrypted.
Key-string entry encryption
Configuring Keychain Management
Creating a Keychain
You can create a keychain on the device. A new keychain contains no keys.
SUMMARY STEPS
1.
configure terminal
2.
key chain name
3.
(Optional)
show key chain name
4.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Creates the keychain and enters keychain configuration
mode.
key chain name
Example:
Step 2
switch(config)# key chain bgp-keys
switch(config-keychain)#
Displays the keychain configuration.
(Optional)
show key chain name
Example:
Step 3
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
421
Configuring Keychain Management
Default Settings for Keychain Management
