cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
8176
Views
0
Helpful
4
Replies

'crypto key generate rsa' necessary for SSH?

iam_pomme
Level 1
Level 1

I read from the manual that the key pair will be used for SSH but just wonder does the command 'crypto key generate rsa' is necessary to enable SSH on ASA?

I can access to my firewall via SSH but when I checked in the configuration on ASA firewall by 'show run', I didn't see this command by the way. Anyone can guide me how to check if my ASA already be enabled  'crypto key generate rsa' ?

Thank you all very much for reply.

1 Accepted Solution

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

Yes, it is necessary to generate the rsa key pair for SSH access.

Here is the command to check the keypair in your ASA:

show crypto key mypubkey rsa

Hope that helps.

View solution in original post

4 Replies 4

Jennifer Halim
Cisco Employee
Cisco Employee

Yes, it is necessary to generate the rsa key pair for SSH access.

Here is the command to check the keypair in your ASA:

show crypto key mypubkey rsa

Hope that helps.

ajnouri
Level 1
Level 1
Any update to this one?

Same issue on IOSv images.

Have you tried the solution posted earlier in this thread?

Thanks @Marvin Rhoads for your reply.


I should have been more precise.
In fact, I am using IOSv and each time I stop & restart the device, I have to regenerate SSH keys for me to be able to connect through SSH.

Maybe, there is another way to generate SSH keys that persist the reload?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: