SSH key authentication

From ImageStream Router Documentation

You do not have permission to edit this page, for the following reason:

You can view and copy the source of this page:

==Setting up SSH Key Authentication== ===Introduction=== :Setting up your Imagestream router to do SSH key based authentication takes about 10 minutes to setup, and requires some basic familiarity with your SSH terminal software. These instructions cover how to setup SSH Key authentication with both OpenSSH for Unix/Linux and PuTTY for Windows. Instructions for other SSH implementations will vary in creation of the key, but should be similar after that. ===Requirements=== :You will need to have an ssh client for your operating system. On Windows(TM), PuTTY works well and is free ( http://www.chiark.greenend.org.uk/~sgtatham/putty/ ). On Linux, OpenSSH will most likely be installed by default. ===Steps for OpenSSH=== #If you already completed this step, then skip to step 4. Generate the SSH Key by opening a terminal and running <code>ssh-keygen -tdsa</code>. #Save the file to the default location. NOTE: Write this down for later. #Type in the passphrase. NOTE: This can be left blank, but it is considered less secure. Ssh-agent can be used to remember the passphrase, but its setup is outside the scope of this document. #Login to your Imagestream router and select option 3. Advanced, then option 1. Bash shell #Run <code>mkdir /root/.ssh/</code>. Then run <code>chmod 700 /root/.ssh/</code> #On your workstation, run <code>scp ''<SSH_KEY_LOCATION>''.pub root@''<IP_OF_ROUTER>'':/root/<code> #On the router, run <code>cat /root/id_dsa.pub >> /root/.ssh/authorized_keys</code>. #Finally, run <code>rm /root/id_dsa.pub</code>. Connecting to <code>ssh ''<IP_OF_ROUTER>''</code> should authenticate via the ssh key. ===Steps for PuTTY=== #Download and install putty, pscp, and puttygen NOTE: You can obtain PuTTY from http://www.chiark.greenend.org.uk/~sgtatham/putty/ #Open puttygen and click on Generate. #Move the mouse to generate random data #Click on save Private Key and save the file to %USERPROFILE%\putty_key.ppk #Highlight the public key data at the top of the puttygen window, and past it into a text editor. Save that file as %USERPROFILE%\putty_key.pub #Run this command at a shell. <code>pscp %USERPROFILE%\putty_key.pub root@''<IP_OF_ROUTER>'':/root/</code> #Login to your Imagestream router and select option 3. Advanced, then option 1. Bash shell #On the router, run <code>cat /root/putty_key.pub >> /root/.ssh/authorized_keys</code>. #Run <code>mkdir /root/.ssh/</code>. Then run <code> chmod 700 /root/.ssh/</code> #Run putty, load the profile for the router, then go to Connection->SSH->Auth, and in the “Private Key file for Authentication” box, type in %USERPROFILE%\putty_key.ppk, then save the profile. #Finally, run <code>rm /root/putty_key.pub</code>. Your router should now authenticate putty via ssh key. Remember to use the profile saved for your router. [[Category:Tech Notes]]

Return to SSH key authentication.