Configure an Administrator with SSH Key-Based Authentication
for the CLI
For administrators who use Secure Shell (SSH)
to access the Panorama CLI, SSH keys provide a more secure authentication
method than passwords. SSH keys almost eliminate the risk of brute-force
attacks, provide the option for two-factor authentication (private
key and passphrase), and don’t send passwords over the network.
SSH keys also enable automated scripts to access the CLI.
Use an SSH key generation tool to create an asymmetric
key pair on the client system of the administrator.
The supported key formats are IETF SECSH and Open SSH.
The supported algorithms are DSA (1024 bits) and RSA (768-4096 bits).
the commands to generate the key pair, refer to your SSH client
The public key and private key are separate
files. Save both to a location that Panorama can access. For added
security, enter a passphrase to encrypt the private key. Panorama
prompts the administrator for this passphrase during login.
Configure the administrator account to use public key