crypto key generate

Last Updated : Jul 06, 2026 |

Generate a new SSH server RSA or ECDSA key pair. Stations that are currently active receive a warning message that the device public key has changed.

Prolog information

Metadata

Keywords:

This command does not close active sessions.

This command can take several minutes to run (depending on CPU speed).

Syntax

crypto key generate { rsa | ecdsa } [ key-size <key-length>]

Parameter	Description	Possible Values	Default Value
encryption	The type of encryption	rsa or ecdsa	rsa
key-length	Specifies the number of bits in the key	RSA=2024 ECDSA= 256/384/521	RSA=2048 EDCSA=256

admin

general

crypto key generate ecdsa key-size 384

Note:

RSA key length supports only 2048 bits.

Send Feedback