cisco ASR1002-X

[Ramprasad2]

hi team,

i am getting logs  below mention

138891: Sep 26 04:38:08.045: %SSH-5-SSH_COMPLIANCE_VIOLATION_RSA_KEY_SIZE: SSH RSA Key Size compliance violation detected. Kindly note that the usage of keys smaller than 2048 bits will be deprecated in the upcoming releases. Please revise your key configuration accordingly to avoid service impact.

i have changed some configuration but again same logs getting.

• I changed the RSA value or decrease the RSA key from 2048 to 1536

[Rob Ingram]

@Ramprasad2 from the CLI use "crypto key generate rsa modulus 2048" at a minimum or "crypto key generate rsa modulus 4096" if you require an even stronger key.

1536 is too weak as indicated by the message.