HP NonStop SSH 544701-014, Reference Manual

Page: 170 / 344

170
•
SSHCOM Command Reference HP NonStop SSH Reference Manual
DELETE KEY
The DELETE KEY command deletes a key from the database and has the following syntax:
DELETE KEY [<system-user-name> :]<key-name>
The individual attributes have the following meaning and syntax:
<system-user-name>
This refers to a valid GUARDIAN user who owns the key in the SSH key store. If <system-user-name> is omitted, either
the user being set in a previously issued ASSUME USER command or the issuer of the ALTER KEY command will be
used as the default. If <system-user-name> is specified, it MUST be followed by a ':' to separate it from the key name.
Only the SUPER.SUPER user (unless explicitly denied in OBJECTTYPE USER record) or those configured with full
SSHCOM access can delete keys from other users.
<key-name>
This refers to the name of the key to be deleted.
EXPORT KEY
The EXPORT KEY command exports a single private/public key pair or just the public key of a key pair into a
GUARDIAN or OSS file. If both keys are exported (private and public), then they are stored into a single file.
The command has the following syntax:
EXPORT KEY [<system-user-name>:]<key-name>
,FILE {<GUARDIAN-file-name> | "<OSS-file-name>" | <OSS-file-name> }
[, PASSPHRASE "<passphrase>"]
[, FORMAT { OPENSSH | SSH2 }]
[, PRIVATE]
The individual attributes have the following meaning and syntax:
<system-user-name>
This refers to a valid GUARDIAN user who owns the key in the SSH key store. If <system-user-name> is omitted, either
the user being set in a previously issued ASSUME USER command or the issuer of the ALTER KEY command will be
used as the default. If <system-user-name> is specified, it MUST be followed by a ':' to separate it from the key name.
<key-name>
The name of the key owned by the current user.
FILE
The name of the GUARDIAN or OSS file that will hold the exported key. If the OSS file name contains spaces, it must
be enclosed in double quotes.
PASSPHRASE
This attribute is relevant only if the PRIVATE attribute is set.
It configures the optional passphrase to secure the resulting private key file. The passphrase must be enclosed in double
quotes (i.e. "..."). If the PASSPHRASE attribute is omitted, the private key can be retrieved by anyone who has read
access to the file.
FORMAT
The format of the resulting key file. Format can be either OPENSSH or SSH2. If this attribute is omitted, SSH2 will be
used as the default. Export of the private key part is not supported when exporting in format SSH2.
PRIVATE