H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 275)

261
Step Command Remarks
2. Display the local RSA host
public key on the screen in a
specific format, or export it to
a specific file.
public-key local export rsa
{ openssh | ssh1 | ssh2 }
[ filename ]
Required
Destroying an asymmetric key pair
You may need to destroy an asymmetric key pair and generate a new pair when an intrusion event has
occurred, the storage media of the device is replaced, the asymmetric key has been used for a long time,
or the certificate from the Certificate Authority (CA) expires. To check the certificate status, use the display
pki certificate command. For more information about the CA and certificate, see "Configuring PKI."
To destroy an asymmetric key pair:
Step Command Remarks
1. Enter system view. system-view N/A
2. Destroy an asymmetric key
pair.
public-key local destroy rsa Required
Configuring a peer public key
To enable your local device to authenticate a peer device, configure the peer RSA public key on the local
device. The following methods are available:
• Import it from a public key file—Obtain a copy of the peer public key file through FTP or TFTP (in
binary mode) first, and then import the public key from the file. During the import process, the
system automatically converts the public key to a string in PKCS (Public Key Cryptography
Standards) format. H3C recommends that you follow this method to configure the peer public key.
• Configure it manually—If the peer device is an H3C device, you can use the display public-key
local public command to view and record its public key. On the local device, input or copy the key
data in public key code view. A public key displayed by other methods may not in the PKCS format,
and the system cannot save the format-incompliant key.
NOTE:
The device supports up to 20 peer pubic keys.
To import a peer host public key from the public key file:
Step Command Remarks
1. Enter system view. system-view N/A
2. Import the peer host public
key from the public key file.
public-key peer keyname import
sshkey filename
Required
To configure a peer public key manually: