Cisco Small Business Switch -- show crypto key

[whistleblower14]

Hi,

I`ve got a question regarding the crypto key pairs on the SMB Switches... as it looks like, we can see both - the private and the public key with the "show crypto key" command?! But for my understanding should the private key always be kept secret or? So is this in any kind of form dangerous or safety critical?

(https://www.cisco.com/c/dam/en/us/td/docs/switches/lan/csbms/sf30x_sg30x/administration_guide/CLI_Nikola300_1_3_7.pdf)

The show crypto key Privileged EXEC mode command displays the device’s SSH

private and public keys for both default and user-defined keys.

[whistleblower14]

any help?

[Reza Sharifi]

Hi,

The private key is always part of the config, which is saved on NVRAM. There is no risk as only limited people should have access to the switch and the switch physically should be kept in safe environment. In addition and depending on the length of the key, it would be very hard to guess it.

HTH