An SSH Key allows you to log into your server without needing a password. SSH Keys can be automatically added to servers during the installation process.

Oct 29, 2012  You need to use a command called ssh-keygen. This command generates, manages and converts authentication keys for ssh. It can create RSA keys for use by SSH protocol version 1 and RSA or DSA keys for use by SSH protocol version 2. He type of key to be generated is specified with the. A host key is a cryptographic key used for authenticating computers in the SSH protocol. Host keys are key pairs, typically using the RSA, DSA, or ECDSA algorithms. Public host keys are stored on and/or distributed to SSH clients, and private keys are stored on SSH servers.

Creating an SSH key on Windows

The simplest way to create SSH key on Windows is to use PuTTYgen.

  • Download and run PuTTYgen.
  • Click the 'Generate' button.
  • For additional security, you can enter a key passphrase. This will be required to use the SSH key, and will prevent someone with access to your key file from using the key.
  • Once the key has been generated, click 'Save Private Key'. Make sure you save this somewhere safe, as it is not possible to recover this file if it gets lost
  • Select all of the text in the 'Public key for pasting into OpenSSH authorized_keys file'. This is what you would need to enter into the control panel to use the SSH key.

Creating an SSH key on Linux

The tools to create and use SSH are standard, and should be present on most Linux distributions. With the following commands, you can generate ssh key.

  • Run: ssh-keygen -t rsa. For a more secure 4096-bit key, run: ssh-keygen -t rsa -b 4096
  • Press enter when asked where you want to save the key (this will use the default location).
  • Enter a passphrase for your key.
  • Run cat ~/.ssh/id_rsa.pub - this will give you the key in the proper format to paste into the control panel.
  • Make sure you backup the ~/.ssh/id_rsa file. This cannot be recovered if it is lost.

Adding an SSH key to your control panel

  • Once you're logged in, go to https://my.vultr.com/sshkeys.
  • Click 'Add SSH Key'.
  • Enter a descriptive name for the key.
  • Paste in your SSH public key. This is a long string beginning with 'ssh-rsa'. You should have saved this from when you generated your key.
  • Click 'Add SSH Key'.
  • Now, when you're deploying servers you will be able to select which SSH keys you want to add to the newly deployed server. Remember to select the keys before the initial server deployment, otherwise you will need to log into the newly created server and add the SSH keys manually.
New

Limitations

  • SSH keys are only available for Linux and FreeBSD. They are not supported for Windows, custom ISOs, nor snapshot restores.
  • SSH keys can only be managed from the control panel during deployment. You cannot use the control panel to manage them on an already-installed instance.

Connecting to a server using an SSH key from a Windows client

  • Download and run the PuTTY SSH client.
  • Type the IP address or Username + IP address ( [email protected] ) of the destination server under the 'Host Name' field on the 'Session' category.
  • Navigate to the 'Connection -> SSH -> Auth' category (left-hand side).
  • Click 'Browse...' near 'Private key file for authentication'. Choose the private key file (ending in .ppk) that you generated earlier with PuTTYgen.
  • Click 'Open' to initiate the connection.
  • When finished, end your session by pressing Ctrl+d.
Generate

Connecting to a server using an SSH key from a Linux client

  • Check that your Linux operating system has an SSH client installed ( which ssh ). If a client is not installed, you will need to install one.
  • Initiate a connection: ssh -i /path/to/id_rsa [email protected]
  • When finished, end your session by pressing Ctrl+d.

How to Generate a Public/Private KeyPair for Use With Solaris Secure Shell

Users must generate a public/private key pair when their site implementshost-based authentication or user public-key authentication. For additionaloptions, see the ssh-keygen(1) manpage.

Before You Begin

Determine from your system administrator if host-based authenticationis configured.

  1. Start the key generation program.


    where -t is the type of algorithm, one of rsa, dsa, or rsa1.

  2. Specify the path to the file that will hold the key.

    Bydefault, the file name id_rsa, which represents an RSAv2 key, appears in parentheses. You can select this file by pressing the Return key. Or, you can type an alternative file name.


    The file name of the public key is created automatically by appendingthe string .pub to the name of the private key file.

  3. Type a passphrase for using your key.

    This passphraseis used for encrypting your private key. A null entry is stronglydiscouraged. Note that the passphrase is not displayed when youtype it in.


  4. Retype the passphrase to confirm it.


  5. Check the results.

    Check that the path to the keyfile is correct.


    At this point, you have created a public/private key pair.

  6. Choose the appropriate option:

    • If your administrator has configuredhost-based authentication, you might need to copy the local host's publickey to the remote host.

      You can now log in to the remote host.For details, see How to Log In to a Remote Host With Solaris Secure Shell.

      1. Type the command on one line with no backslash.


      2. When you are prompted, supply your login password.


    • If your site uses user authentication with public keys, populateyour authorized_keys file on the remote host.

      1. Copy your public key to the remote host.

        Type thecommand on one line with no backslash.


      2. When you are prompted, supply your login password.

        Whenthe file is copied, the message “Key copied” is displayed.


  7. (Optional) Reduce the prompting for passphrases.

    For a procedure, see How to Reduce Password Prompts in Solaris Secure Shell. For more information, see the ssh-agent(1) and ssh-add(1) man pages.

Example 19–2 Establishing a v1 RSA Key for a User

In the following example, the user cancontact hosts that run v1 of the Solaris Secure Shell protocol. To be authenticated by v1hosts, the user creates a v1 key, then copies the public key portion to theremote host.

Linux Generate New Ssh Host Key


Coments are closed
Scroll to top