Using an SSH keyfile with root credentials
SUM allows you to log in with a password or by providing an SSH key.
-
On the node that is running
SUM, type
ssh-keygen -t rsa
. SUM also supports DSA encryption key format. To create a DSA encryption key, typessh -keygen -t dsa
. A passphrase is optional. -
Save the key in the directory
.ssh/id_rsa.pub
. Root users, use the directory/root/.ssh
. -
Verify that the private key is in PEM format by opening the key and viewing the top of the key for the following text:
---- BEGIN RSA PRIVATE KEY ----
-
If necessary, on the node you want to update, create an
.ssh
directory at the root level. Set the permissions level on the directory to 700. -
Determine if the node you want to update has the filename
.ssh/authorized_keys
. If this file is not present, create or append this file. Set the permissions on theauthorized_keys
file to 640.NOTE:If you append the file, more users are authorized to use the private key.
-
Copy the contents of
.ssh/id_rsa.pub
on the host node, and then paste them into the filename.ssh/authorized_keys
on the remote node. -
Open an SSH path between the host node and the node you want to update.
-
Type
ssh root@10.0.0.1
. This parameter opens a shell path. -
Type
ssh root@10.0.0.1 uname
. This parameter executes the command and returns.
-
Type
-
SUM requires access to
id_rsa
(private key file), and the optional passphrase.NOTE:If other applications require the public key in PEM format, you can convert it by typing
ssh-keygen -e -f id_rsa.pub > id_rsa_pub.pem
. Open the key, and look at the PEM format for---- BEGIN SSH2 PUBLIC KEY ----
.
To create a private key on a Windows system, you can use an application like PuTTY or PuTTY Key Generator (PuTTYGen). For more information, see https://www.digitalocean.com/community/tutorials/how-to-create-ssh-keys-with-putty-to-connect-to-a-vps.
To export the file to PEM format, select,
.