Specifications
15-6 Cryptography Commands
crypto generate key
GeneratesanRSApublic‐privateencryptionkeypairthatisrequiredforaCertificateSigning
Request(CSR)oraself‐signedcertificate.ForSSH,generatesanauthenticationkey.
Syntax
crypto generate key {admin | domain | eap | ssh | web}{128 | 512 | 1024 | 2048}
Parameters
Defaults
None.
Mode
Enabled.
Usage
Youcanoverwriteakeybygeneratinganotherkeyofthesametype.
SSHrequiresanSSHauthenticationkey,butyoucanallowMSStogenerateitautomatically.The
firsttimeanSSHclientattemptstoaccesstheSSHserveronaRoamAboutSwitch,theswitch
automaticallygeneratesa1024‐byte
SSHkey.Ifyouwanttousea2048‐bytekeyinstead,usethe
cryptogeneratekeyssh2048commandtogenerateone.
Example
TogenerateanadministrativekeyforusewithRASM,typethefollowingcommand:
RBT-8100# crypto generate key admin 1024
key pair generated
Related Commands
showcryptokeysshonpage 15‐19
admin Generatesanadministrativekeypairforauthenticatingthe
RoamAboutSwitchtoRASMorWebView.
domain Generatesakeypairforauthenticatingmanagementtraffic
exchangedbyRoamAboutswitcheswithinaMobilityDomain.
eap GeneratesanEAPkeypairforauthenticatingtheRoamAboutSwitch
to802.1Xsupplicants(clients).
ssh
GeneratesakeypairforauthenticatingtheRoamAboutSwitchto
SecureShell(SSH)clients.
web Generatesanadministrativekeypairforauthenticatingthe
RoamAboutSwitchtoWebAuthenticatingclients.
128|512|1024|2048 Lengthofthekeypairinbits.
TheminimumkeylengthforSSHis1024.The
length128appliesonly
todomainandistheonlyvalidoptionforit.