Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 1235

Command History Command introduced in version 6.7.0 firmware. crypto key generate rsa Use the crypto key generate rsa command in Global Configuration mode to generate RSA key pairs for use by the SSH or HTTPS server. Use the crypto key zeroize form of the command to delete the private key from the local file system. Syntax crypto key generate rsa Default Configuration RSA key pairs do not exist. By default, 2048-bit RSA keys are generated. Command Mode Global Configuration mode User Guidelines RSA keys are generated in pairs: one public RSA key and one private RSA key. These keys are used to encrypt communication with the switch when using SSH. If your switch already has RSA keys when you issue this command, you are warned and prompted to replace the existing keys. The keys are not saved in the switch configuration; they are saved in the file system and the private key is never displayed to the user. RSA keys, along with other switch credentials, are distributed to all units in a stack on a configuration save. Use the crypto key zeroize rsa command to remove RSA key pair from the system. Private keys should never be shared with unauthorized users. This command generates the private public key pairs in the following files: ssh_host_rsa_key and ssh_host_rsa_key.pub, ssh_host_key and ssh_host_key.pub files. Both the RSA and DSA keys must be generated to enable the SSH server. Security Commands 1235