Generating and deleting a DSA key pair

To generate a DSA key pair, enter the following command. 

device(config)#crypto key generate dsa

To delete the DSA host key pair, enter the following command. 

device(config)#crypto key zeroize dsa

Syntax: crypto key { generate | zeroize } dsa

The generate keyword places a host key pair in the flash memory and enables SSH on the device, if it is not already enabled.

The zeroize keyword deletes the host key pair from the flash memory. This disables SSH if no other server host keys exist on the device.

The dsa keyword specifies a DSA host key pair. This keyword is optional. If you do not enter it, the command crypto key generate generates a DSA key pair by default, and the command crypto key zeroize works as described in Deleting DSA and RSA key pairs.

Parent topic: Enabling and disabling SSH by generating and deleting host keys