Before generating RSA keys for SSH, which command must be configured on the device?

The ip domain-name domain command is essential because RSA key generation for SSH requires a hostname and a domain name to create a fully qualified domain name (FQDN). Without an FQDN, the device cannot generate the cryptographic keys necessary for secure SSH communication. The password password command configures a local password, which is important for user authentication but not directly required for RSA key generation itself. ip ssh authentication-retries 2 configures SSH authentication parameters, which are relevant after SSH is enabled but not a prerequisite for key generation. crypto key generate rsa modulus 1024 is the command used to generate the RSA keys, but it will fail if the domain name is not already configured.