117Step Command Remarks2. Create local key pairs. public-key local create { dsa |ecdsa | rsa } [ name key-name ] By default, no local key pair exists.Distributing a local host public keyYou must distribute a local host public key to a peer device so the peer device can use the public key toencrypt information sent to the local device or authenticate the digital signature signed by the localdevice.To distribute a local host public key:1. Record the key or export the key to a file.2. Transfer the key, for example, by using FTP or TFTP.This section covers only the first task.The following are the methods available for recording or exporting a local host public key:• Exporting a host public key in a specific format to a file (Use this method if you can import publickeys from a file on the peer device.)• Displaying a host public key in a specific format and saving it to a file (Use this method if you canimport public keys from a file on the peer device.)• Displaying a host public key (Use this method if you must manually enter the key on the peerdevice.)Exporting a host public key in a specific format to a fileStep Command1. Enter system view. system-view2. Export a local host public keyin a specific format to a file.• Export an RSA host public key:{ In non-FIPS mode:public-key local export rsa [ name key-name ] { openssh | ssh1 |ssh2 } filename{ In FIPS mode:public-key local export rsa [ name key-name ] { openssh | ssh2 }filename• Export a DSA host public key:public-key local export dsa [ name key-name ] { openssh | ssh2 }filename
