Switch Domain change, am I required to update/generate a new RSA key?

[victoriabardy]

Hello all,

I need to update tacacs on a few nexus 3500 switches and it includes updating the switch domain name.  Does this change require that I generate a new RSA key?  

Please let me know.

Thank you.

[Flavio Miranda]

@victoriabardy 

 We have similar discussion here in the community.

 Basically, it should not be necessary but as you can see on the link below, the dude had problem in some devices and not in others.

https://community.cisco.com/t5/other-security-subjects/when-changing-ip-domain-name-do-i-regenerate-rsa-keys/td-p/618680

[Martin L]

Yes, I would generate new keys; better save then sorry down the road; 

Regards, ML
**Please Rate All Helpful Responses **

[Richard Burts]

It has been my experience that when the domain name changes that a new RSA key is needed. There may be some circumstances where that is not the case, but I agree with ML that the prudent (and safe rather than sorry) thing is to generate new keys.

[MHM Cisco World]

no need new RSA key 

MHM