443name key-name: Specifies a local key pair by its name, a case-insensitive string of 1 to 64characters. Valid characters are letters, digits, and hyphens (-). If you do not specify a key pair, thiscommand destroys all key pairs of the specified type.Usage guidelinesTo avoid key compromise, destroy the local key pair and generate a new pair after any of thefollowing conditions occurs:• An intrusion event has occurred.• The storage media of the device is replaced.• The local certificate has expired. For more information about local certificates, see SecurityConfiguration Guide.Examples# Destroy the local RSA key pairs with the default names. system-view[Sysname] public-key local destroy rsaConfirm to destroy the key pair? [Y/N]:y# Destroy the local DSA key pair with the default name. system-view[Sysname] public-key local destroy dsaConfirm to destroy the key pair? [Y/N] :y# Destroy the local ECDSA key pair with the default name. system-view[Sysname] public-key local destroy ecdsaConfirm to destroy the key pair? [Y/N]:y# Destroy local RSA key pair rsa1. system-view[Sysname] public-key local destroy rsa name rsa1Confirm to destroy the key pair? [Y/N]:y# Destroy local DSA key pair dsa1. system-view[Sysname] public-key local destroy dsa name dsa1Confirm to destroy the key pair? [Y/N] :y# Destroy local ECDSA key pair ecdsa1. system-view[Sysname] public-key local destroy ecdsa name ecdsa1Confirm to destroy the key pair? [Y/N]:yRelated commandspublic-key local createpublic-key local export dsaUse public-key local export dsa to export a local DSA host public key.Syntaxpublic-key local export dsa [ name key-name ] { openssh | ssh2 } [ filename ]ViewsSystem view
