Specifications

15-6 Cryptography Commands
crypto generate key
GeneratesanRSApublicprivateencryptionkeypairthatisrequiredforaCertificateSigning
Request(CSR)oraselfsignedcertificate.ForSSH,generatesanauthenticationkey.
Syntax
crypto generate key {admin | domain | eap | ssh | web}{128 | 512 | 1024 | 2048}
Parameters
Defaults
None.
Mode
Enabled.
Usage
Youcanoverwriteakeybygeneratinganotherkeyofthesametype.
SSHrequiresanSSHauthenticationkey,butyoucanallowMSStogenerateitautomatically.The
firsttimeanSSHclientattemptstoaccesstheSSHserveronaRoamAboutSwitch,theswitch
automaticallygeneratesa1024byte
SSHkey.Ifyouwanttousea2048bytekeyinstead,usethe
cryptogeneratekeyssh2048commandtogenerateone.
Example
TogenerateanadministrativekeyforusewithRASM,typethefollowingcommand:
RBT-8100# crypto generate key admin 1024
key pair generated
Related Commands
showcryptokeysshonpage 1519
admin Generatesanadministrativekeypairforauthenticatingthe
RoamAboutSwitchtoRASMorWebView.
domain Generatesakeypairforauthenticatingmanagementtraffic
exchangedbyRoamAboutswitcheswithinaMobilityDomain.
eap GeneratesanEAPkeypairforauthenticatingtheRoamAboutSwitch
to802.1Xsupplicants(clients).
ssh
GeneratesakeypairforauthenticatingtheRoamAboutSwitchto
SecureShell(SSH)clients.
web Generatesanadministrativekeypairforauthenticatingthe
RoamAboutSwitchtoWebAuthenticatingclients.
128|512|1024|2048 Lengthofthekeypairinbits.
TheminimumkeylengthforSSHis1024.The
length128appliesonly
todomainandistheonlyvalidoptionforit.