ssh client first-time enable

Function

The ssh client first-time enable command enables the first-time authentication on the SSH client.

The undo ssh client first-time enable command disables the first-time authentication on the SSH client.

By default, the first-time authentication on the SSH client is disabled.

Format

ssh client first-time enable

undo ssh client first-time enable

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

Enabling the first-time authentication on the SSH client forgoes having to check if the RSA public key of the SSH server is valid when a STelnet or SFTP client logs in to the SSH server for the first time. The check is skipped because the STelnet or SFTP client has not saved the RSA public key of the SSH server.

If the first-time authentication is not enabled on the SSH client, the STelnet or SFTP client will be unable to log in to the SSH server for the first time as it will fail to pass the validity check on the RSA public key.

Instead of enabling the first-time authentication on the SSH client, the STelnet or SFTP client can assign the ECC, RSA or DSA public key to the SSH server on the SSH client in advance to successfully log in to the server for the first time. When you use STelnet or SFTP to connect to the server, you need to specify the public key authentication algorithm for server authentication as the ECC, RSA, or DSA key algorithm.

Example

# Enable the first-time authentication on the SSH client. Thus, when the SSH client is connected to the SSH server for the first time, the client does not check the validity of the RSA public key of the server.

<sysname> system-view
[sysname] ssh client first-time enable