Initial Query
How do I export keys on a cisco catalyst 9400 via the cli?
LLM Generation
Query
How do I export keys on a cisco catalyst 9400 via the cli?
Output
To export keys (such as crypto keys) on a Cisco Catalyst 9400 switch via CLI, you can use these commands:
For SSH/RSA keys:
| copy nvram:ssh-rsa-key flash:
|
or
| copy nvram:ssh-rsa-key tftp:
|
For HTTPS (SSL) certificates:
| copy nvram:https-key-pair flash:
|
or
| copy nvram:https-key-pair tftp:
|
If using TFTP, you'll be prompted to enter:
1. TFTP server IP address
2. Destination filename
Example with TFTP:
| Switch# copy nvram:ssh-rsa-key tftp:
Address or name of remote host []? 192.168.1.100
Destination filename [ssh-rsa-key]? switch-keys
|
Note: Make sure you have TFTP server access and proper security measures in place when exporting sensitive key material.
Substring Evaluation
Testing if the previous output contains the string crypto pki export: False
Initial Query
How do I export keys on a cisco catalyst 9400 via the cli?
LLM Generation
Query
How do I export keys on a cisco catalyst 9400 via the cli?
Output
To export keys (like SSH or HTTPS certificates) from a Cisco Catalyst 9400 switch via CLI, you can use the following commands depending on what type of keys you want to export:
For SSH Keys:
| copy nvram:ssh-rsa-key flash:
|
or
| copy nvram:ssh-dsa-key flash:
|
For HTTPS (SSL) Certificates:
| copy nvram:IOS-Self-Sig#1.cer flash:
|
General syntax:
| copy source-location:filename destination-location:filename
|
You can then use TFTP, SCP, or other file transfer methods to copy the keys from flash to an external location:
Using TFTP:
| copy flash:keyfile tftp://server-ip/path/filename
|
Using SCP:
| copy flash:keyfile scp://username@server-ip/path/filename
|
Remember to:
1. Verify you have proper permissions
2. Ensure the destination server is reachable
3. Handle the keys securely
4. Make sure you have enough space at the destination
Note: The exact filenames may vary depending on your configuration. You can use "show flash:" to see available files.
Substring Evaluation
Testing if the previous output contains the string crypto pki export: False
Initial Query
How do I export keys on a cisco catalyst 9400 via the cli?
LLM Generation
Query
How do I export keys on a cisco catalyst 9400 via the cli?
Output
To export keys (such as SSH or HTTPS certificates) from a Cisco Catalyst 9400 switch via CLI, you can use the following commands:
For SSH Keys:
| copy system:running-config nvram:startup-config
copy nvram:startup-config tftp:
|
or
| copy nvram:startup-config scp:
|
For HTTPS/SSL Certificates:
| crypto pki export [trustpoint-name] pem terminal
|
or
| crypto pki export [trustpoint-name] pem url tftp://server-address/path/filename.pem
|
Remember to:
1. Specify the correct TFTP/SCP server address if using those methods
2. Ensure you have network connectivity to the destination server
3. Verify you have proper permissions and space at the destination
4. Replace [trustpoint-name] with your actual trustpoint name
Note: The exported configuration file will contain the encrypted keys, which can be imported back into another device if needed.
Substring Evaluation
Testing if the previous output contains the string crypto pki export: True
Initial Query
How do I export keys on a cisco catalyst 9400 via the cli?
LLM Generation
Query
How do I export keys on a cisco catalyst 9400 via the cli?
Output
To export keys (such as SSH keys or certificate keys) from a Cisco Catalyst 9400 switch via CLI, you can use the following commands depending on what type of keys you want to export:
For SSH keys:
| copy system:running-config tftp://server-ip/path/filename
|
or
| show crypto key mypubkey rsa
|
For Certificate keys:
| crypto pki export trustpoint-name pem terminal
|
or
| crypto pki export trustpoint-name pem url tftp://server-ip/path/filename
|
Make sure to:
1. Have TFTP server configured and accessible
2. Verify you have proper permissions
3. Remember to replace server-ip, path, filename, and trustpoint-name with your specific values
Note: Always ensure you're following your organization's security policies when exporting sensitive key material.
Substring Evaluation
Testing if the previous output contains the string crypto pki export: True
Initial Query
How do I export keys on a cisco catalyst 9400 via the cli?
LLM Generation
Query
How do I export keys on a cisco catalyst 9400 via the cli?
Output
To export keys (such as SSH or HTTPS certificates) from a Cisco Catalyst 9400 switch via CLI, you can use the following commands depending on what type of keys you want to export:
For SSH Keys:
| # show crypto key mypubkey rsa
|
This will display the RSA public keys.
For HTTPS/SSL Certificates:
| # show crypto pki certificates verbose
|
This displays detailed certificate information.
To export certificates to TFTP server:
| # copy nvram:IOS-Self-Sig#1.cer tftp://server-ip-address/filename.cer
|
To export the configuration with encrypted keys:
| # copy running-config tftp://server-ip-address/filename.txt
|
Note: Some keys and certificates might be in a non-exportable format for security reasons. Always ensure you're following your organization's security policies when exporting sensitive security materials.
Make sure you have proper backup procedures in place before manipulating any security keys or certificates.
Substring Evaluation
Testing if the previous output contains the string crypto pki export: False