Set 'modulus' to greater than or equal to 2048 for 'crypto key generate rsa'

보통레벨 1수동 검토cisco-iosxr

설명

Use this command to generate RSA key pairs for your Cisco device. RSA keys are generated in pairs--one public RSA key and one private RSA key. An RSA key pair is a prerequisite for setting up SSH and should be at least 2048 bits. NOTE: IOS does NOT display the modulus bit value in the Audit Procedure. CIS assessment: Manual. Reported as SKIP with review instructions.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

CIS assessment: Manual. Perform the following to determine if the RSA key pair is configured: IOSXR#sh crypto key mypubkey rsa Wed Jul 19 18:09:46.009 UTC Key label: the_default Type : RSA General purpose Size : 2048 Created : 16:25:09 UTC Wed Jul 19 2023

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Generate an RSA key pair for the router. crypto key generate rsa general-keys Wed Jul 19 18:10:51.633 UTC The name for the keys will be: the_default % You already have keys defined for the_default Do you really want to replace them? [yes/no]: yes Choose the size of the key modulus in the range of 512 to 4096 for your General Purpose Keypair. Choosing a key modulus greater than 512 may take a few minutes. How many bits in the modulus [2048]: Generating RSA keys ... Done w/ crypto generate keypair [OK]

속성

운영 체제: 모두
태그: cisco-iosxrnetworkhardening
참고 자료: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.2.2 Set 'modulus' to greater than or equal to 2048 for 'crypto key generate rsa'