问题

使用Linux主机或其它存储系统通过SSH远程登录待上电存储的BMC系统时，如果提示“ESDSA host key”因失效无法登录，如何更新公钥？

回答

1. 通过回显信息查看保存公钥的文件路径。
   如本示例中保存公钥的文件路径为“/xxx/.ssh/known_hosts”。

   host:~ # ssh admin@xxx.xxx.xxx.xxx 
   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
   @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @ 
   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
   IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
   Someone could be eavesdropping on you right now (man-in-the-middle attack)! 
   It is also possible that a host key has just been changed. 
   The fingerprint for the ECDSA key sent by the remote host is xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx [MD5]. 
   Please contact your system administrator. 
   Add correct host key in /xxx/.ssh/known_hosts to get rid of this message. 
   Offending ECDSA key in /xxx/.ssh/known_hosts:3 
   ECDSA host key for xxx.xxx.xxx.xxx has changed and you have requested strict checking. 
   Host key verification failed.

2. 编辑“know_hosts”文件，删除无法登录的存储系统IP地址和公钥。

   下次通过SSH远程登录该存储时，“know_hosts”文件会生成新的公钥。

3. 重新通过SSH远程登录存储系统。