A SERVICE OF

logo

Open as PDF
next previous
crypto
OVERVIEW
SSHCategory:
configPrimary context:
the section called “crypto” (page 544)Related Commands
autorun (page 68)
Usage: crypto host-cert generate self-signed [START END CNAME OU ORG
CITY STATE COUNTRY]
crypto host-cert zeroize
crypto key generate <ssh [rsa] | cert [rsa] KEYSIZE | autorun-key [rsa]>
crypto key zeroize <ssh | cert | autorun>
Description: Install or remove authentication les for ssh or https server
or for autorun
Parameters:
o host-cert - operation on the https host certicate le. The host
certicate le cannot be created before the certicate
rsa key le has been created.
o key - operation on an ssh or https rsa key le.
o generate - install new key or self-signed certicate.
Note: installing a new key may be very slow in the rst few
minutes after booting the device.
o zeroize - remove an existing key or certicate le.
o self-signed - install new self-signed certicate.
o START - certicate will be valid beginning on this date.
o END - certicate will be valid until this date.
o CNAME - the name (IP address) of this device.
o OU - organizational unit or department.
o ORG - organization name.
o CITY - city or location.
o STATE - state or region.
o COUNTRY - two character ISO country code. Typing 'x<TAB>' will
provide a list of all valid country codes beginning with
the letter x.
o ssh - Install/remove host key for ssh server.
o cert - Install/remove rsa key for https certicate.
o autorun-key - Install/remove rsa key for autorun.
o rsa - optional keyword indicating key type (only rsa is available).
o KEYSIZE - for a certicate key, the size of the key desired.
Certicate keys may be 512, 768, or 1024 bits. (Ssh host
keys are always 896 bits.)
COMMAND STRUCTURE
■ crypto host-cert -- Install/remove self-signed certificate for https. (p. 146)
■ generate -- Create a self-signed certificate for the https server. (p. 146)
■ self-signed -- Create a self-signed certificate for the https server. (p. 148)
■ start-date -- Validity start date for certificate. (MM/DD[/[YY]YY]) (p. 148)
■ end-date -- Validity end date for certificate. (MM/DD[/[YY]YY]) (p. 146)
138© 2009 Hewlett-Packard Development Company, L.P.