Managing SSH host keys

Products

• ProxySG Software - SGOS

Issue/Introduction

Managing SSH host keys
You want help managing SSH host keys

Resolution

By default, the ProxySG uses Secure Shell (SSH) and password authentication so administrators can access the ProxySG securely. No action is required unless you want to change the existing SSH host key, disable a version of SSH, or import RSA host keys. Only one SSH service is allowed on the ProxySG.

By default, both SSHv1 and SSHv2 are enabled and assigned to port 22.
Note: Do NOT delete both versions. This disables the SSH Console and you will have to re-enable the SSH service. You can add or delete SSHv1 or SSHv2 support through the Management Console or the CLI. In order to add a new SSHv1 or SSHv2 host key, you will need to first delete the existing host key.

Through the Management Console
 

• Go to Configuration > Services > SSH Console > SSH Host
• Click the Delete button to delete a host key for the desired version
• Click the Create button to create a host key for the desired version
  
  Through the CLI
  SGOS#(config)services
  SGOS#(config services)ssh-console
  SGOS#(config services ssh-console)delete host-keypair {[sshv1] | [sshv2]}
  SGOS#(config services ssh-console)create host-keypair {[sshv1] | [sshv2]}
  SGOS#(config services ssh-console)view host-public-key {[sshv1] | [sshv2]}