Specifying The Ssh Key - Cisco MDS 9000 Series Configuration Manual

Configuring SSH Services

Specifying the SSH Key

You can specify an SSH key to log in using the SSH client without being prompted for a password. You can
specify the SSH key in three different formats:
• Open SSH format
• IETF SECSH format
• Public Key Certificate in PEM format
Specifying the SSH Key in OpenSSH
To specify or delete the SSH key in OpenSSH format for a specified user, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2 switch(config)# username admin sshkey ssh-rsa
A A A A B 3 N z a C 1 y c 2 E A A A A B I w A A A I E A t j I H r I t / 3 d D e o h i x 6 J c R S I Y Z 0 E O d J 3 l 5 R O N W c w S g A u T U S r L k 3 a 9 h d Y k z Y 9 4 f h H m N G Q G C j V g + 8 c b O x y H 4 Z 1 j c V F c r D o g t Q T + Q 8 d v e q t s / 8 X Q h q k N A F e G y 4 u 8 T J 2 U s o r e C U 6 D l i b w k p z D a f z K T p A 5 v B 6 F m H d 2 T I 6 G n s e 9 F U g K D 5 f s =
Specifies the SSH key for the user account (admin).
Step 3
switch(config)# no username admin sshkey ssh-rsa
A A A A B 3 N z a C 1 y c 2 E A A A A B I w A A A I E A t j I H r I t / 3 d D e o h i x 6 J c R S I Y Z 0 E O d J 3 l 5 R O N W c w S g A u T U S r L k 3 a 9 h d Y k z Y 9 4 f h H m N G Q G C j V g + 8 c b O x y H 4 Z 1 j c V F c r D o g t Q T + Q 8 d v e q t s / 8 X Q h q k N A F e G y 4 u 8 T J 2 U s o r e C U 6 D l i b w k p z D a f z K T p A 5 v B 6 F m H d 2 T I 6 G n s e 9 F U g K D 5 f s =
(Optional) Deletes the SSH key for the user account (admin).
Specifying the SSH Key in IETF SECSH
To specify or delete the SSH key in IETF SECSH format for a specified user, follow these steps:
Procedure
Step 1 switch# copy tftp://10.10.1.1/secsh_file.pub bootflash:secsh_file.pub
Downloads the file containing the SSH key in IETF SECSH format.
Step 2
switch# configure terminal
Enters configuration mode.
Step 3 switch(config)# username admin sshkey file bootflash:secsh_file.pub
Specifies the SSH key for the user account (admin).
Step 4 switch(config)# no username admin sshkey file bootflash:secsh_file.pub
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
Specifying the SSH Key
157