Managing SSH Public keys on IOS devices

[Gordon Ross]

I've been experimenting with SSH public key authentication into my Cisco devices. I've got a basic setup working fine, but my concern is key management. At the moment all I can see is how to define the keys locally. Once you start to scale beyond a couple of devices, managing these local keys starts to become a headache.

Is there any way to automate this? e.g. Radius, automatic download, etc?

Thanks,

Gordon.

[Karsten Iwen]

I'm not aware of an "elegant" way to scale that. A customer handles it in a way that all keys are located in a central repository. With every new or removed key, a script logs into all devices and changes the keys/users accordingly.