Keys

Key management on the UTM

Last adaptation to the version: 14.2.0 (07.2026)

New:

Beta For participants on the Beta Channel only:

Advanced search has been added
Bit lenghts 512 and 1024 are no longer being supported for RSA

New key type: OVPN_STATIC_KEY

notempty

This article refers to a Beta version

12.6.1 12.5.1 12.6.0 12.2.4 11.7

Preliminary note

The keys on the UTM are used both for encryption (e.g. of VPN connections) and for signing (e.g. DKIM)
Locally generated keys always consist of a public and a private part

Only the public part should end up in someone else's hands

Key overview

Caption

Description

Key management

notempty

New as of v14.2.0

Ein Klick auf die Schaltfläche öffnet die erweiterte Suche

hide

Klicken für dauerhafte Anzeige

Erweiterte Suche
Spalte	Dienst	Name der Spalte auswählen. Die Auswahl hängt von der Tabelle ab, in der man sich gerade befindet.
Suchbegriff	internet	Begriff, nach dem in der ausgewählten Spalte gesucht werden soll
Kriterien mit ... -Operator verbinden	and / or	Suchbegriffe verknüpfen mit und bzw. oder. Es müssen entweder alle Begriffe vorkommen oder einer
	Filter hinzufügen	Weiteren Begriff in einer Spalte hinzufügen für eine Suche nach mehreren Kriterien
		Suche starten
		Suche starten und erweiterte Suche zuklappen

Name

Name of the key

Type:

Key type

RSA
x25519
ed25519
OVPN_STATIC_KEY
notempty
New as of v12.6.1

Hash

Hash value of the key

Length

Key bit length

Export key

Public part (Format)

Key part is saved as a file in the set format (see below)

Public part (Format)

Key part is copied to the clipboard in the set format (see below)

Delete

Deletes the key

Opens the key export settings

Dropdown menu with settings for key export

Export destination

FileClipboard

Exports the respective key part either to a file or to the clipboard

RSA export format:

PemHEXB64

Exports the RSA key part in Pem, Hex or Base64 format

ED25519/X25519 Export Format:

PemRAW

Exports ED25519/X25519 keys in Pem or RAW format

Add key

Create a new key with the Add key button.

Name:

RSA-Demo

Enter the desired name of the key

Add key dialog

Type:

Select cryptographic method
RSA used for: IPSec, Mailrelay

Used for: Mailrelay (signing)

Used for: WireGuard

notempty

New as of v12.6.1

Used for static SSL VPN keys (openvpn tls-auth)

Key length:
Only for RSA:

2048

3072 (Default)

4096

Select bit-length of the key

notempty

Für DKIM-Schlüssel wird aus Kompatibilitätsgründen 2048 Bit als Standard-Wert verwendet

Creates the key and closes the dialogue

Closes the dialogue without creating a key

Import key

Import a key by clicking the Import key button.

Import from file

Import Option:

FileClipboard

The import is done from a file.
The key name corresponds to the file name followed by the format

Import key from file dialog

Datei:

Browse...

Select the file that contains the key to be imported

File type:

The key type can be determined automatically.
Alternatively, type can be specified manually.

Format

Select the format in which the key is provided

Type:
Only for RAW, HEX & B64

The key is to be imported as a private key part

The key is to be imported as a public key part

Import from clipboard

Import Option:

File Clipboard

The import is carried out by entering a value

Dialog Import key from clipboard

Name

ed25519-mx.ttt-point.de

Enter the desired name of the key

Key value

MCowBQYDK2VwAyEA…

Key from the clipboard

File type:

The key type can be determined automatically.
Alternatively, type can be specified manually.

Format

Select the format in which the key is provided

Type:
Only for RAW, HEX & B64

The key is to be imported as a private key part

The key is to be imported as a public key part