Generating an ECDSA or RSA Key Pair

A command to generate a host key pair places the key pair in flash memory and enables SSH on the ICX device, if it is not already enabled.

To generate host key pairs, complete the following steps:

  1. Enter global configuration mode.
    device# configure terminal
  2. Generate RSA key pair. 
    device(config)# crypto key generate rsa modulus 2048
    The previous example generates a modulus 2048-bit key.
    RSA Host keys with a size of 2048, 3072, or 4096 bits can be created.
  3. Generate ECDSA key pair.
    device(config)# crypto key generate ec size 384
    The previous example creates an ECDSA key pair with a size of 384 bits.

    Valid ECDSA key sizes are 256, 384, and 521.

Parent topic: Enabling and Disabling SSH by Generating and Deleting Host Keys