Recreate SSH v2 keypair for SSH on Edge SWG(ProxySG)

Products

• ProxySG Software - SGOS
• ISG Proxy

Issue/Introduction

Unable to SSH into the Edge SWG(ProxySG) appliance gives the error RSA key already present.

Resolution

When SSH v2 keypair is not present in the current config (i.e deleted or not initialized properly), SGOS may not also populate information correctly over the management console (JAVA UI), in that case, SSH v2 host keypair can’t be created via the management console. A serial console connection will be needed with the device to create/renew SSH v2 host keypair and CLI commands shown above can be used.

After taking the serial console access please execute the below commands:

Press 1, once you are in the CLI please run the below commands:

ProxySG>en
Enable Password:
ProxySG#conf t
Enter configuration commands, con per line. End with CTRL-Z.
ProxySG#(config)ssh-console
ProxySG#(config ssh-console) view host-public-key

Example:

Here you can see the available host-public-key. To delete the existing key and re-create the new public key execute the below steps:

ProxySG#(config ssh-console)delete host-keypair
ok
ProxySG#(config ssh-console)create host-keypair
ok
ProxySG#(config ssh-console)view host-public-key

Verify the created/new public key on GUI under GUI Console > Configuration > Authentication > SSH-Console.