Generating public keys for QRadar products

To forward normalized events in IBM® QRadar®, you must copy the public key file, /root/.ssh/id_rsa.pub, from the off-site source to the off-site target.

If the off-site source and off-site target are on separate systems, the public key is automatically generated. If the off-site source and target are both on an all-in-one system, the public key is not automatically generated. You must manually generate the public key.

Procedure

To manually generate the public key, follow these steps:

  1. Use SSH to log in to your system as the root user.
  2. To generate the public key, type the following command:

    opt/qradar/bin/ssh_key_generating

  3. Press Enter.

    The public and private key pair is generated and saved in the /root/.ssh/id_rsa folder.