Contents

1   Decription

This instruction describes how to change the Secure Shell (SSH) public key applicable for the local Operation and Maintenance (O&M) user account. O&M users are allowed to create, change, and delete their own SSH key.

2   Procedure

2.1   Change SSH Public Key

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user is familiar with the security policy of the organization.
  • The new public SSH key of the user is known.
  • An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

Steps

1. Navigate to the managed object SshPublicKey, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,UserAccountM=1,UserAccount=joedoe,SshPublicKey=1

2. Enter Config mode:

   (SshPublicKey=1)>configure

3. Replace the attribute publicKeyContent with the new public SSH key of the user, for example:

   (config-SshPublicKey=1)>publicKeyContent="ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCalZLZKdbq2Ki5n+fMjnx3xLI8YdrgUeme/HwtU2TK377WoKOVmbFlJwkD+Vw8Kb6yHEyGP8SLYcnHmqbjOqhpqOyxgm76iQq3EX1Ueu/5PetBKomVSH3XhxpxNg+1WRwg03EQT2+61shy5lm6EHJG2il+7vc4QFOBxrHxC6SW8O2UjeSIuPFYBZAZ05Wzy2r06X5vLZyokzzcHRqJMzAGxhb+Zg7OWzBFpCj/xCb34Bx6H+DXY1TfYoeV/U8ra5RIBX3Hj0AwcWWA+d8UPUrlhEpkzhJ2b29X4Wk17wJqMiBi69w8wgkyFZLk8GEjMR1hEWVyN5vZ5EH/IRSj6kjN joedoe@SC-1"

   Note:  

   The public key content is to be either in OpenSSH key format or entered in Base64 format without line breaks of an RFC 4716, PEM, or PKCS8 formatted key content (use command: base64 -w 0 content_file).

   The private key must always be protected with a strong password and when the private key is replaced the password needs to be changed.

   
   
4. Commit the setting:

   (config-SshPublicKey=1)>commit

5. Verify the setting:

   (SshPublicKey=1)>show -v -r

   The following is an example output:

   SshPublicKey=1 publicKeyContent="ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCalZLZKdbq2Ki⇒ 5n+fMjnx3xLI8YdrgUeme/HwtU2TK377WoKOVmbFlJwkD+Vw8Kb6yHEyGP8SLYcnHmqbjOqhp⇒ qOyxgm76iQq3EX1Ueu/5PetBKomVSH3XhxpxNg+1WRwg03EQT2+61shy5lm6EHJG2il+7vc4Q⇒ FOBxrHxC6SW8O2UjeSIuPFYBZAZ05Wzy2r06X5vLZyokzzcHRqJMzAGxhb+Zg7OWzBFpCj/xC⇒ b34Bx6H+DXY1TfYoeV/U8ra5RIBX3Hj0AwcWWA+d8UPUrlhEpkzhJ2b29X4Wk17wJqMiBi69w⇒ 8wgkyFZLk8GEjMR1hEWVyN5vZ5EH/IRSj6kjN joedoe@SC-1" sshPublicKeyId=1