Cisco CRS User Manual

crypto key generate dsa
To generate Digital Signature Algorithm (DSA) key pairs, use the crypto key generate dsa command.
crypto key generate dsa
Syntax Description
This command has no keywords or arguments.
Command Default
None
Command Modes
EXEC
Command History
ModificationRelease
This command was introduced.Release 2.0
Usage Guidelines
Use the crypto key generate dsa command to generate DSA key pairs for your router.
DSA keys are generated in pairs—one public DSA key and one private DSA key.
If your router already has DSA keys when you issue this command, you are warned and prompted to replace
the existing keys with new keys.
To remove the DSA key generated, use the crypto key zeroize dsa command.
Task ID
OperationsTask ID
executecrypto
Examples
The following example shows how to generate a 512-bit DSA key:
RP/0/RP0/CPU0:router# crypto key generate dsa
The name for the keys will be: the_default
Choose the size of your DSA key modulus. Modulus size can be 512, 768, or 1024 bits.
Choosing a key modulus
How many bits in the modulus [1024]: 512
Generating DSA keys...
Done w/ crypto generate keypair
[OK]
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 197
Public Key Infrastructure Commands
crypto key generate dsa

Cisco CRS Specifications

General

Brand	Cisco
Model	CRS
Category	Network Router
Language	English