SSH - Client Keys - Import

Key Generation (commandline example)

Most Powershell and Unix/Linux users may use the ssh-keygen command to create a private and public key and display their SSH fingerprint.

PS C:\Users\dtaylor ssh-keygen
Generating public/private ed25519 key pair.
Enter file in which to save the key (C:\Users\dtaylor/.ssh/id_ed25519):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in C:\Users\dtaylor/.ssh/id_ed25519
Your public key has been saved in C:\Users\dtaylor/.ssh/id_ed25519.pub
The key fingerprint is:
SHA256:0S/zDge2VrNarNOCV4rhV7OuvwKlkGdEXD1Ab2Po248 example\dtaylor@mysitedtaylor02
The key's randomart image is:
+--[ED25519 256]--+
|       o.o+o     |
|        o. oo    |
|       o. o =.   |
|      o oo.+ .   |
|       +So* +    |
|        +. @+o   |
|       . ===Bo   |
|        +.BBoo   |
|         o+BE..  |
+----[SHA256]-----+

Manual Public Key Import

To manually add the public key provided by an end user:

1. Navigate to the User Profile page and click on the SSH Policy link.

   

2. Scroll down to the Current SSH Keys section and click on Add (manually).

   

3. Next, copy and paste the full public SSH client key into the text box provided.

   

   If you provide a valid key, a success message displays, and the key is listed in the Current SSH Keys section.

   Note: A single user can be associated with multiple SSH keys. This is especially useful if a user is using the same username to access from multiple client machines.

   

Import from File

As an alternative, if you have the SSH key in a file on your PC, you can upload it directly by clicking on Import. Enter or browse to the SSH key file and press the Import SSH Key button. A successful import will display in the Current SSH Keys section.

Finally, to ensure the key will be solicited from the SSH client and/or that the key will be a required credential, see the Edit SSH Policy section and check the boxes appropriately.

If you plan on using OpenSSH in batch mode, you should use the following settings (require_key = yes, require_pass_with_key = no). If you want to enforce "two-factor" authentication, enable all of the following settings (require_key = yes, require_pass_with_key = yes).

For detailed information about configuring the SSH Keys policy, please also see the Interface Policy documentation page.