Change SSH Public Key

1	Introduction
1.1	Prerequisites
2	Procedure

1 Introduction

This document describes how to change the Secure Shell (SSH) public key applicable for the local Operation and Maintenance (O&M) user account. O&M users are allowed to create, change, and delete their own SSH key.

1.1 Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1 Conditions

The following conditions must apply:

The user is familiar with the security policy of the organization.
The new public SSH key of the user is known.
An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

2 Procedure

To change an ssh public key:

Navigate to the managed object SshPublicKey, for example:
>dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,UserAccountM=1,UserAccount=joedoe,SshPublicKey=1
Enter Config mode:
(SshPublicKey=1)>configure
Replace the attribute publicKeyContent with the new public SSH key of the user, for example:
(config-SshPublicKey=1)>publicKeyContent="ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCalZLZKdbq2Ki5n+fMjnx3xLI8YdrgUeme/HwtU2TK377WoKOVmbFlJwkD+Vw8Kb6yHEyGP8SLYcnHmqbjOqhpqOyxgm76iQq3EX1Ueu/5PetBKomVSH3XhxpxNg+1WRwg03EQT2+61shy5lm6EHJG2il+7vc4QFOBxrHxC6SW8O2UjeSIuPFYBZAZ05Wzy2r06X5vLZyokzzcHRqJMzAGxhb+Zg7OWzBFpCj/xCb34Bx6H+DXY1TfYoeV/U8ra5RIBX3Hj0AwcWWA+d8UPUrlhEpkzhJ2b29X4Wk17wJqMiBi69w8wgkyFZLk8GEjMR1hEWVyN5vZ5EH/IRSj6kjN joedoe@SC-1"

Note:
The public key content is to be either in OpenSSH key format or entered in Base64 format without line breaks of an RFC 4716, PEM, or PKCS8 formatted key content (use command: base64 -w 0 content_file).

Note:
The private key must always be protected with a strong password and when the private key is replaced the password needs to be changed.
Commit the setting:
(config-SshPublicKey=1)>commit

Verify the setting:

(SshPublicKey=1)>show -v -r

The following is an example output:

SshPublicKey=1
    publicKeyContent="ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCalZLZKdbq2Ki5n+fMjnx3xLI8YdrgUeme/HwtU2TK377WoKOVmbFlJwkD+Vw8Kb6yHEyGP8SLYcnHmqbjOqhpqOyxgm76iQq3EX1Ueu/5PetBKomVSH3XhxpxNg+1WRwg03EQT2+61shy5lm6EHJG2il+7vc4QFOBxrHxC6SW8O2UjeSIuPFYBZAZ05Wzy2r06X5vLZyokzzcHRqJMzAGxhb+Zg7OWzBFpCj/xCb34Bx6H+DXY1TfYoeV/U8ra5RIBX3Hj0AwcWWA+d8UPUrlhEpkzhJ2b29X4Wk17wJqMiBi69w8wgkyFZLk8GEjMR1hEWVyN5vZ5EH/IRSj6kjN joedoe@SC-1"
    sshPublicKeyId=1