181
To do…
Use the command…
Remarks
Enter system view
system-view
—
Display the local RSA host public
key on the screen in a specified
format, or export it to a specified
file
public-key local export rsa
{
openssh
|
ssh1
|
ssh2
} [
filename
]
Select a command according to
the type of the key to be
exported.
Display the local DSA host public
key on the screen in a specified
format or export it to a specified
file
public-key local export dsa
{
openssh
|
ssh2
} [
filename
]
Destroying an asymmetric key pair
You may need to destroy an asymmetric key pair and generate a new pair when an intrusion event has
occurred, the storage media of the device is replaced, the asymmetric key has been used for a long time,
or the certificate from the Certificate Authority (CA) expires. To check the certificate status, use the
display
pki certificate
command. For more information about the CA and certificate, see the chapter ―PKI
configuration.‖
Follow these steps to destroy an asymmetric key pair:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Destroy an asymmetric key pair
public-key local destroy
{
dsa
|
rsa
}
Required
Configuring a peer public key
To enable your local host to authenticate a peer, configure the peer RSA or DSA public key on the local
host. The following methods are available:
Import it from a public key file
—
Obtain a copy of the peer public key file through FTP or TFTP (in
binary mode) first, and then import the public key from the file. During the import process, the
system automatically converts the public key to a string in the Public Key Cryptography Standards
(PKCS) format. HP recommends that you follow this method to configure the peer public key.
Configure it manually
—
If the peer is an HP device, you can use the
display public-key local public
command to view and record its public key. On the local host, input or copy the key data in public
key code view. A public key displayed by other methods may not in the PKCS format, and the
system cannot save the format-incompliant key.
NOTE:
The device supports up to 20 peer pubic keys.
Follow these steps to import a peer host public key from the public key file:
To do…
Use the command…
Remarks
Enter system view
system-view
—
