cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3717
Views
0
Helpful
3
Replies

How do I export a crypto RSA key that I generated on an IOS box?

jkeeffe
Level 2
Level 2

On a 3560 switch running 12.2(25)SEA IOS, I've generated a crypto RSA exportable key. I'm following the directions in a document I found on CCO titled "Configuring Secure Shell on Routers and Switches Running Cisco IOS". Well I generated the key using:

'crypto key generate rsa general-keys exportable'

...and get this key ...

ENGLAB-3560-232-15#sh crypto key mypubkey rsa

% Key pair was generated at: 07:47:43 PST Mar 9 2005

Key name: ENGLAB-3560-232-15.ghc.org

Usage: General Purpose Key

Key is exportable.

Key Data:

30819F30 0D06092A 864886F7 0D010101 05000381 8D003081 89028181 00A9FAC4

653E6C41 70B56051 DAAB15BF 9E64EB79 66D122AC 5D5E9617 5A994C21 3746E304

29DC50E4 87E7C086 14D4EBB7 A6816CCB 28AD6B6D F866E283 F0DFC4B7 A035700E

EEE67F10 A3D1D041 BB32BBFD 16CBA097 5B3DB555 84165809 15CDC3E3 59D84E23

75469588 92016FE8 C15E4F2A A81BEC09 A1C7FDDB D7176937 672A6FA6 CB020301 0001

% Key pair was generated at: 07:47:45 PST Mar 9 2005

Key name: ENGLAB-3560-232-15.ghc.org.server

Usage: Encryption Key

Key is not exportable.

Key Data: ...I've deleted the rest of the lines...

Now the problem with the Cisco documentation is that it ignores completely how to export the key so I can use it in my SSH client - which is Hummingbird.

I've tried copy and paste of the key into a text file but Hummingbird does not recognize it. Somehow I have to get the exportable part of this key into a file so Hummingbird will use it.

Any ideas on how to do this?

3 Replies 3

b-watkins
Level 1
Level 1

You shouldn't need to export the key as you aren't using public/private key authentication for SSH (it's not supported).

Don't I need to get part of that key into the Hummingbird client? Maybe export is not the word.

I'm not familiar with Hummingbird specifically, but all the SSH clients that I am familiar with (OpenSSH, PuTTY, and Tera Term Pro) will automatically ask you to accept the key when you attempt your first connection.