Increase https rsa key on 3850

[julio.aldana]

Hi

When you enable http secure server on a cisco device, it generates 1024 rsa keys. Is it possible to generate 2048 bits keys for https? I don't want to request an authority certificate.

We want to do this on a 3850 switch with 3.3.4SE IOS.

Thanks

[Karsten Iwen]

You can generate an extra RSA-keypair for that:

crypto key generate rsa label HTTPS-KEY modulus 2048
crypto pki trustpoint YOUR-TRUSTPOINT
  rsakeypair HTTPS-KEY
ip http secure-trustpoint YOUR-TRUSTPOINT

[julio.aldana]

Thanks Karsten

Can I configure a trustpoint with just a switch? I mean no servers, official certification entities, applications.... just commands on one single switch?.

Thanks for you help. 

[julio.aldana]

Oh... now I understand you included the trustpoint configuration. Sorry >.<

Thanks again.