800.682.0200 | FAX: 360.568.2923 |  About Us  |  Downloads  |  Manuals  |  Home  |  Index

 

 

Using public-key authentication to an HP-UX host

NOTE: Protect the private key. Anyone with this key can access the host without providing a password.

  1. Create a public/privatekey pair.
    <See Configuring Public-Key Authentication at HP.>

    From the users account on the HPUX system, type:

    ssh-keygen -t dsa

    Generating public/private dsa key pair.
    Enter file in which to save the key (~/.ssh/id_dsa): ...
    Enter passphrase (empty for no passphrase):
    Enter same passphrase again:
    Your identification has been saved in ...
    Your public key has been saved in ...
    The key fingerprint is:
    84:7d:f5:dd:88:f7:53:88:8a:6e:f7:85:04:28:6e:ed root@hostname

    This command will create the files id_dsa and id_dsa.pub. The file id_dsa contains the private key, please protect this file.

  2. Add the public key to the "~/.ssh/authorized_keys" file.

    The is the directory used by ssh-keygen. If the file does not exist, create it. Copy the contents of id_dsa to authorized_keys. Set .ssh and authorized_keys to be not world or group readable (chmod 600).

  3. Configure sshd_conf for public-key authentication.

    PubkeyAuthentication yes

  4. Restart sshd on the server.
  5. Move the private key to the users window directory as id_dsa.

    The directory name varies by version of Windows. Check the "About Secure92" dialog box for the currently configured directory.