239
Exporting the host public key in a specific format to a file
After you export and save the host public key in a specify format to a file, transfer the file to the peer
device.
To export and save the local host public key to a file:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Export a local RSA or DSA
host public key in a specific
format to a file.
•
To export a local RSA host public key:
{
In non-FIPS mode:
public-key local export rsa
{
openssh
|
ssh1
|
ssh2
}
filename
{
In FIPS mode:
public-key local export rsa
{
openssh
|
ssh2
}
filename
•
To export a local DSA host public key:
public-key local export dsa
{
openssh
|
ssh2
}
filename
Use at least one command.
Destroying a local asymmetric key pair
You may need to destroy a local asymmetric key pair and generate a new pair when an intrusion event
has occurred, the storage media of the device is replaced, the asymmetric key has been used for a long
time, or the local certificate expires. For more information about the local certificate, see "
To destroy a local asymmetric key pair:
Step Command
1.
Enter system view.
system-view
2.
Destroy a local asymmetric key pair.
public-key local destroy
{
dsa
|
rsa
}
Specifying the peer public key on the local device
In some applications, such as SSH, to enable the local device to authenticate a peer device, specify the
peer public key on the local device. The device supports up to 20 peer public keys.
For information about displaying or exporting the host public key, see "
Displaying or exporting the local
Take one of the following methods to specify the peer public key on the local device:
