Creating a public key using the CLI

Use the commands in this section to create a new public key for SSH user authentication. You can use this key instead of the password to authenticate the remote user.

Note

If no SSH-DSA2 or SSH-RSA2 public keys exist, you can use the Web UI to create an "admin" SSH-DSA2 key and an "admin" SSH-RSA2 key. For details, see Importing a host key into the global host-keys database using the Web UI.

To create a public key:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Create the public key:
```
hostname (config) # cmc auth <keyType> identity <identityName> generate
```
where <keyType> can be ssh-dsa2 or ssh-rsa2 and <identityName> is a user-friendly name.

Verify your changes:

hostname (config) # show cmc auth identities

Save your changes:
```
hostname (config) # write memory
```

To remove a public key:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Remove the public key:

hostname (config) # no cmc auth <keyType> identity <identityName>

Verify your change:

hostname (config) # show cmc auth identities

Save your changes:
```
hostname (config) # write memory
```

Example

The following example creates an SSH-DSA2 identity named "admin4" on the NX-04 appliance.

NX-04 (config) # cmc auth ssh-dsa2 identity admin4
NX-04 (config) # show cmc auth identities
DSA2 identity admin4:
   Public Key:
ssh-dss AAA3NzaC1kc3MAAACBAJl3PisWNnz/gYLvL4JC7xFMoq3HE89rai7trnJmpxjylArYhf
MzaGndFA4qGRZMFzhiz9Jhi/+W1ufIrXLGzakC0lAAAAFQCuMCsMwMGN9zT5w2JCiDt7D6orNwAA
...

Note

This example is from a Network Security appliance, but it is representative of other Trellix appliances as well.