Let's move ahead and start configuring SSX public key authentication.
First, let's see what we need.
We need an client that supports RSA authentication and all the modem SSX clients are good for this.
Then we need the private and public keep bear for each user will generate the least bear in a minute,
both on Windows and Linux.
And if we want to authenticate to networking devices like Cisco, we need an iOS that supports this
feature.
In fact, we need the NSA server or demand that supports public view authentication.
This lecture is recommended if you are using Windows to authenticate to Cisco devices or to Linux servers,
if you are using Linux as the 86 client, you can skip this part and move to generating SSA to keep
bear on Linux.
Put is the most common choice is assessed, each client on Windows Boutique self does not generate the
keeper, but there is another utility called petechiae generator that can do this.
Boutique regenerator is open source and free software, so lets download it.
I'll simply search on Google for a download, put the key generator.
And I'll open this website.
The page contains the download the links for the latest released version of Beauty and Beauty Key Generator,
and I'm searching for Jen Dopp sexy boutique.
Jen, that's sexy, OK?
And I'm downloading Pooty Jen for 60 beat operating systems.
OK, once downloaded, will open the application.
This is pretty key generator.
The type of keys RSA and its length will be of two thousand forty eight, because this is the minimum
recommended size for a key, if you need stronger security, you can choose a key with a length of four
thousand ninety six weeks or more.
This is the main screen of the application and I'll click on Generate.
To generate our random key pooty key generator needs a lot of randomness and I have to continuously
move the mouse over this area for it to be able to generate barkeeper.
And the kids are ready, the next step is to make the comment for the kids and save them somewhere on
the desk.
Don't forget to add the comment because maybe you'll generate more kids and don't want to mix them up.
For example, Windows RSA Key and the current debate.
At the beginning of this section, I've said that the private key can be further secured by encrypting
it with a pass for us.
This is the moment when you can encrypt the private key with a passphrase.
You're right, the path for us here.
In this example, I won't add any for us because I want to keep things simple and don't want to enter
the past for us each time I authenticate to the server.
And I'm saving the phylis, the public, I'm saving it on my desktop, and I'll give it a name.
Like I say, Windows underline, as they say that, Bob.
And I'm saving the private key.
OK, let's say windows.
Privat, that p, p, k.
OK, that's all I've generated the SSA to keep Bear on windows.
Before we can use the keys to authenticate to Cisco, iOS or to Linux, we have to configure them first.
I'll show you how to configure the SFH demon on both Cisco and the Linux in the next Lexus.
See you in a minute.