show authorized-keys

Last Updated : Nov 22, 2024 |

This command displays a user’s public keys used for public key authentication.

If the users in the running-config are different than the users stored on the Branch Gateway file system, the user will get a warning about “abandoned” user directories.

Syntax

show authorized-keys {<username> | all} [verbose]

Parameters

Parameter

Description

Possible Values

Default Value

username

Branch Gateway local username created with username command.

Branch Gateway username.

“all” to show keys for all users (admin)

verbose

Optional flag to display key’s long ssh name type and comment field.

  • yes

  • no

no

Context

ssh-server-configuration

User level

admin or read-write

Read-write users can only display their own keys.

Admin users can display all users’ keys.

Example

develop-ssh-server-configuration)# show authorized-keys root
**** root Authorized Keys
Line  Key Type   Fingerprint
----  ---------- -----------
 01:      ECDSA: SHA256:E11RJSe5E1daqJTKQz/z5cZJFCyio2VF/ZVb0MaO24U
Done!


(develop-ssh-server-configuration)# show authorized-keys root verbose
**** root Authorized Keys
Line  Key Type   Fingerprint
----  ---------- -----------
 01:      ECDSA: SHA256:E11RJSe5E1daqJTKQz/z5cZJFCyio2VF/ZVb0MaO24U
           ecdsa-sha2-nistp384  Branch Gateway 1 – root key
Done!


(ssh-server-configuration)# show authorized-keys root
*** Found abandoned directory for user olduser
*** Use "erase auth abandoned" to remove abandoned user directories

**** root Authorized Keys
Line  Key Type   Fingerprint
----  ---------- -----------
 01:      ECDSA: SHA256:E11RJSe5E1daqJTKQz/z5cZJFCyio2VF/ZVb0MaO24U
Done!