topic Re: 'crypto key generate rsa' necessary for SSH? in Network Security

'crypto key generate rsa' necessary for SSH?

iam_pomme — Mon, 11 Mar 2019 17:44:57 GMT

I read from the manual that the key pair will be used for SSH but just wonder does the command 'crypto key generate rsa' is necessary to enable SSH on ASA?

I can access to my firewall via SSH but when I checked in the configuration on ASA firewall by 'show run', I didn't see this command by the way. Anyone can guide me how to check if my ASA already be enabled 'crypto key generate rsa' ?

Thank you all very much for reply.

Re: 'crypto key generate rsa' necessary for SSH?

Jennifer Halim — Thu, 13 May 2010 06:14:31 GMT

Yes, it is necessary to generate the rsa key pair for SSH access.

Here is the command to check the keypair in your ASA:

show crypto key mypubkey rsa

Hope that helps.

Re: 'crypto key generate rsa' necessary for SSH?

ajnouri — Wed, 11 Oct 2017 01:01:16 GMT

Any update to this one?

Same issue on IOSv images.

Re: 'crypto key generate rsa' necessary for SSH?

Marvin Rhoads — Wed, 11 Oct 2017 02:28:04 GMT

Have you tried the solution posted earlier in this thread?

Re: 'crypto key generate rsa' necessary for SSH?

ajnouri — Wed, 11 Oct 2017 04:09:11 GMT

Thanks @Marvin Rhoads for your reply.

I should have been more precise.
In fact, I am using IOSv and each time I stop & restart the device, I have to regenerate SSH keys for me to be able to connect through SSH.

Maybe, there is another way to generate SSH keys that persist the reload?