Reinitializing SecureAdmin

Description

Use this procedure to generate new host and server keys. You perform this procedure when you want new keys or when you want to change the sizes of keys. After you complete this procedure, SecureAdmin is reinitialized and new keys are generated to your new specification.

Step

To reinitialize SecureAdmin, complete these steps.

Step Action
1 Enter the following command: 
secureadmin -f setup
2 When prompted, enter a size for the host key.
3 When prompted, enter a size for the server key.
4 Cancel the existing keys by stopping the sshd daemon by entering the following command: 
secureadmin disable ssh
5 Make the keys take effect by entering the following command: 
secureadmin enable ssh

Sample output

Some clients might send the following warning when they detect the change in the host key. You need not do anything in response to it.

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@       WARNING: HOST IDENTIFICATION HAS CHANGED!         @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle 
attack)!

It is also possible that the host key has just been changed.

Please contact your system administrator.

Add correct host key in /u/mlam/.ssh/known_hosts to get rid of this 
message.

Agent forwarding is disabled to avoid attacks by corrupted servers.

Are you sure you want to continue connecting (yes/no)?

Copyright © 1999, Network Appliance, Inc. All rights reserved.

Part No. 210-02334
File: secadmi3.htm
Last updated: 04/26/99 08:12:02