HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 289

Chapter 4 C Commands crypto key generate rsa Send documentation comments to [email protected] crypto key generate rsa To generate an RSA key pair, use the crypto key generate rsa command in configuration mode. crypto key generate rsa [label key-pair-label] [exportable] [modulus key-pair-size] Syntax Description label key-pair-label exportable modulus key-pair-size Specifies the name of the key pair. The maximum size is 64 characters. Configures the key pair to be exportable. Specifies the size of the key pair. The size ranges from 512 to 2048. Defaults By default, the key is not exportable. The default label is switch FQDN. The default modulus is 512. Command Modes Configuration mode. Command History Release 3.0(1) Modification This command was introduced. Usage Guidelines You can generate one or more RSA key pairs and associate each RSA key pair with a distinct trust point CA, where the MDS switch enrolls to obtain identity certificates. The MDS switch needs only one identity per CA, which consists of one key pair and one identity certificate. Cisco MDS SAN-OS allows you to generate RSA key pairs with a configurable key size (or modulus). The default key size is 512. Valid modulus values are 512, 768, 1024, 1536, and 2048. You can also configure an RSA key pair label. The default key pair label is FQDN. Examples The following example shows how to configure an RSA key pair called newkeypair. switch# config terminal switch(config)# crypto key generate rsa label newkeypair The following example shows how to configure an RSA key pair called testkey, of size 768, that is exportable. switch# config terminal switch(config)# crypto key generate rsa label testkey exportable modulus 768 The following example shows how to generate an exportable RSA key with the switch name as the default label and 512 as the default modulus. switch# config terminal switch(config)# crypto key generate rsa exportable OL-16217-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family Command Reference 4-135