HP NonStop SSH 544701-014, Reference Manual

Page: 171 / 344

HP NonStop SSH Reference Manual SSHCOM Command Reference
•
171
If this attribute is specified, the full private key will be exported, otherwise only the public part of the key will be
exported.
Note : Exporting a private key may result in a compromise of security. Only the SUPER.SUPER user (unless explicitly
denied in OBJECTTYPE USER record) or those configured with full SSHCOM access can export private keys.
FREEZE KEY
The FREEZE KEY command freezes a key. A local SFTP client cannot connect to a remote host using a key that has a
status set as frozen. The key won’t enable access until it is thawed using the THAW KEY command.
The command has the following syntax:
FREEZE KEY [<system-user-name>:]<key-name>
The individual attributes have the following meaning and syntax:
<system-user-name>
A valid GUARDIAN user who owns the key entry in the user database. If <system-user-name> is omitted, either the user
being set with a previously issued ASSUME USER command or the issuer of the FREEZE KEY command will be used
as the default. If <system-user-name> is specified, it MUST be followed by a ':' to separate it from the known host name
that follows.
Only the SUPER.SUPER user (unless explicitly denied in OBJECTTYPE USER record) or those configured with full
SSHCOM access can freeze a key entry for other users.
<key-name>
The name of the key to be frozen.
GENERATE KEY
This command is used to generate a private/public key pair. The generated key is added to the SSH2 key store. The
command has the following syntax:
GENERATE KEY [<system-user-name>:]<key-name>
, TYPE {RSA | DSA}
[, BITS <number>]
[, COMMENT "<comment>"]
[, LIVE-DATE <date-time>]
[, EXPIRE-DATE <date-time>]
The individual attributes have the following meaning and syntax:
<system-user-name>
A valid GUARDIAN user who owns the key in the SSH key store. If <system-user-name> is omitted, either the user
being set in a previously issued ASSUME USER command or the issuer of the ALTER KEY command will be used as
the default. If <system-user-name> is specified, it MUST be followed by a ':' to separate it from the key name.
<key-name>
The name of the key owned by the current user.
<date time>
Date or date and time in either of the following formats:
•
DD Mon YYYY hh:mm
•
"DDMonYY,hh:mm"