Overwriting A Generated Key Pair - Cisco MDS 9000 Series Configuration Manual

Specifying the SSH Key in Public Key Certificate in PEM
(Optional) Deletes the SSH key for the user account (admin).
Specifying the SSH Key in Public Key Certificate in PEM
To specify or delete the SSH key in PEM-formatted Public Key Certificate form for a specified user, follow
these steps:
Procedure
Step 1 switch# copy tftp://10.10.1.1/cert.pem bootflash:cert.pem
Downloads the file containing the SSH key in PEM-formatted Public Key Certificate form.
Step 2
switch# configure terminal
switch(config)#
Enters configuration mode.
Step 3 switch(config)# username admin sshkey file bootflash:cert.pem
Specifies the SSH key for the user account (usam).
Step 4
switch(config)# no username admin sshkey file bootflash:cert.pem
(Optional) Deletes the SSH key for the user account (usam).

Overwriting a Generated Key Pair

If the SSH key pair option is already generated for the required version, you can force the switch to overwrite
the previously generated key pair.
To overwrite the previously generated key pair, follow these steps:
Procedure
Step 1 switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# ssh key dsa 768
Example:
ssh key dsa 512
dsa keys already present, use force option to overwrite them
switch(config)# ssh key dsa 512 force
deleting old dsa key.....
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
158
Configuring SSH Services