Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Generating or Deleting SSH Host Keys

SSH host keys are automatically regenerated when the device is placed into FIPS mode and rebooted. They are located in the file system as follows:

  • /etc/ssh/fips_ssh_host_ecdsa_key
  • /etc/ssh/fips_ssh_host_rsa_key

Deleting SSH Keys

If, for any reason, it become necessary to delete one or both of SSH host keys, from the shell prompt, issue the command rm /etc/ssh/<key-name> for the selected key.

Generating a New SSH Host Key

To generate a new SSH host key, from the shell prompt, issue one of the following commands, selecting the appropriate key size:

  • ssh-keygen -t ecdsa -b [256|384|521] -f /etc/ssh/ssh_host_ecdsa_key

  • ssh-keygen -t rsa -b [2048|3072|4096] -f /etc/ssh/ssh_host_rsa_key

Related Documentation