unable to create KEY PAIR

[sahrizal123]

Hi,

I plan to add SSH to my ASA firewall.

Try to generate self sign cert.

No option to select at Key pair, so i add key pair..

When add receive error =

[ERROR] crypto key generate rsa label <Default-RSA-Key> noconfirm
     Key name '&lt;Default-RSA-Key&gt;' is reserved.

Kindly advice.

[Karsten Iwen]

For SSH you don‘t need a Cert, just the key-pair. And the ASA doesn‘t use labels here. Just use „crypto key generate rsa mod 2048“.

[Karsten Iwen]

more info on the SSH-config:
https://supportforums.cisco.com/t5/security-documents/guide-to-better-ssh-security/ta-p/3133344

[sahrizal123]

Thank you Sir,

But when i try to Putty, it show error as attached.