Specifications

16-17
Cisco Unity Express Voice-Mail and Auto-Attendant CLI Administrator Guide for 3.0 and Later Versions
OL-14010-09
Chapter 16 Backing Up and Restoring Data
Backup Server Authentication Using a SSH Host Key
DETAILED STEPS
Configuring Backup Server Authentication Using the SSH Host Key
Prerequisites
Cisco Unity Express 3.0 or a later version
Required Data for This Procedure
To use a backup server’s fingerprint (private host key) to enable SSH authentication, you must first
retrieve the fingerprint “out-of-band” by running the ssh-keygen routine on the backup server. This
routine is included in the OpenSSH package. The following example shows the command and its output:
ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub
1024 4d:5c:be:1d:93:7b:7c:da:56:83:e0:02:ba:ee:37:c1 /etc/ssh/ssh_host_dsa_key.pub
SUMMARY STEPS
1. config t
2. security ssh knownhost host {ssh-rsa | ssh-dsa} fingerprint-string
3. end
Command or Action Purpose
Step 1
config t
Example:
se-10-0-0-0# config t
Enters configuration mode.
Step 2
backup server url sftp://url
Example:
se-10-0-0-0(config)# backup server url
sftp://company.com/server22
Establishes an initial connection with the backup
server.
Step 3
backup server authenticate
Example:
se-10-0-0-0(config)# backup server authenticate
Retrieves the fingerprint of the backup server’s host
key and establishes a secure SSH connection.
Step 4
end
Example:
se-10-0-0-0(config)# end
Returns to privileged EXEC mode.
Step 5
show security ssh knownhost
Example:
se-10-0-0-0(config)# show security ssh knownhost
Displays a list of configured SSH servers and their
fingerprints.