RSA Key Management

About this task

Refer to the RSA Keys screen to review existing RSA key configurations that have been applied to managed devices. If an existing key does not meet the needs of a pending certificate request, generate a new key or import/export an existing key to and from a remote location.

Rivest, Shamir, and Adleman (RSA) is an algorithm for public key cryptography. The algorithm can be used for certificate signing and encryption. When a device trustpoint is created, the RSA key is the private key used with the trustpoint.

To review existing device RSA key configurations, generate additional keys, or import/export keys to and from remote locations:

Procedure

Select the RSA Keys tab from the Certificate Management menu.

Certificate Management - RSA Keys Screen
Select a listed device and review its current RSA key configuration.
Each key has its size and character syntax displayed. Once reviewed, optionally generate a new RSA key, import a key from a selected device, export a key to a remote location, or delete a key from a selected device.
Click Generate Key to create a new key with a defined size.

Certificate Management - Generate RSA Keys Screen

Define the following parameters required for the Import of the key:


Key Name	Enter the 32-character maximum name assigned to the RSA key.
Key Size	Set the size of the key as either 2048 (bits) or 4096 (bits). Leaving this value at the default setting of 2048 is recommended to ensure optimum functionality.

Click OK to generate the RSA key.
Click Cancel to revert to the last saved configuration.