Specifying the minimum key size using the CLI
Print
Copy page Copy as Markdown for LLMs View as Markdown View the page as plain text
Open in ChatGPT Ask ChatGPT about this page Open in Claude Ask Claude about this page Prev Next Use the commands in this section to increase the minimum key size.
To specify the minimum key size:
Go to CLI configuration mode:
hostname > enable
hostname # configure terminal Specify the size:
hostname (config) # crypto certificate min-key-size <bits> where <bits> is the minimum number of bits.
Important You cannot generate a self-signed certificate with a key that is longer than 8192 bits.
Save your changes:
hostname (config) # write memory
Was this article helpful?
Yes No
Related articles
Network Security (NX) > Common Security Platform Product Docs > System Security Guide Release 2026.1 > Authentication > Common Access Card (CAC) for certificate authentication > Configuring the user attributes for certificate authentication
Network Security (NX) > Common Security Platform Product Docs > System Security Guide Release 2026.1 > Certificates > Managing HTTPS and MTA certificates > Viewing certificates > Regenerating the system self-signed certificate
Network Security (NX) > Common Security Platform Product Docs > System Security Guide Release 2026.1 > Certificates > Managing HTTPS and MTA certificates > Downloading certificates
File Protect (FX) > File Protect 10.x > File Protect System Administration Guide Release 10.x > Appendices > Configuring secure shell (SSH) authentication > User authentication