An engineer has configured the domain name, user name, and password on the local router. What is the next step to complete the configuration tor a Secure Shell access RSA key?

`crypto key import rsa pem` is used to import an existing RSA key from a file, not to generate a new key pair on the device.

`crypto key pubkey-chain rsa` is a command used to manage a chain of public keys for authentication, not to generate the router's own host key.

The `crypto key generate rsa` command is used to create the RSA key pair (public and private keys) that SSH relies upon for secure communication and authentication. This key generation is a mandatory prerequisite for the device to establish SSH sessions.

`crypto key zeroize rsa` is used to securely delete existing RSA keys from the router's memory, which is the opposite of generating them.