Crypto Key Generate Rsa Asa

admin
Rsa

Dec 26, 2013  so it looks as if there is no point in the 'crypto key generate rsa' command if i follow it up with the 'crypto key generate rsa usage-keys label sshkeys mod 1024' command, i just wanted to make sure the first wasn't need for the second to.

  1. Because SSH uses RSA public keys to encrypt the sessions, you need to have consistent timing information. Example 3-16 shows not only how to manually adjust and verify timing information, but also how to create a domain name and generate RSA keys. Example 3-17 shows how to visualize SSH-related information in the Running-config.
  2. May 20, 2014  Author, teacher, and talk show host Robert McMillen shows you how to use the Cisco ASA version 9 generate RSA keys command.

KB ID 0001322

Problem

I’ve lost count of the number of times this has happened to me! Most of my colleagues prefer to use the ASDM for remote management, but if (like me) you work at command line, then sometimes people <ahem> forget to generate the RSA keypair when deploying a firewall. Then even if SSH access and AAA is setup correctly, you still can’t get in via SSH. Instead you see the following;

RoyalTS and RoyalTSX: ssh_exchange_identification: Connection closed by remote host.

PuTTY: PuTTY Fatal Error: Server unexpectedly closed network connection.

Cisco Crypto Key Generate Rsa

SecureCRT: Connection closed.

OSX/Linux: ssh_exchange_identification: Connection closed by remote host.

Now at command line you can fix this with a ‘Crypto Key Generate RSA Modulus 2048‘ command, but you can’t get to command line only ASDM.

Solution

On older versions of the ASDM you could generate the keypair in the Identification Certificates section (well you still can but only if you are also generating a certificate request file). So, as we are command line warriors, lets use the ASDM’s command line!

Cisco Switch Can't Generate Crypto Key Rsa

Tools > Command Line Interface > Multiple Line /save-the-world-keys-generator.html.

Send > Wait a couple of minutes and try again.

REMEMBER: I’m assuming you have SSH setup correctly if not, see the following article;

Related Articles, References, Credits, or External Links

Cisco Crypto Key Gen Rsa

NA