Configuring the SSH User Private Key
Operation Scenario
Configure the SSH private key.
After the SSH private key has been loaded on the user client and the iBMC, the user can log in to the iBMC CLI over SSH without entering a password. This access mode is recommended due to higher security and easier operation.
Prerequisites
Conditions
- The client (local PC) can communicate with the server iBMC.
- The SSH interface has been enabled on the iBMC.
Data
- SSH public key type: RSA or DSA
- IP address of the iBMC management network port
- SSH service port number
Software
- A free tool, such as putty.exe, to log in to the iBMC
- A free tool, such as puttygen.exe, to generate private keys
Procedure
- On the client (such as a PC), run puttygen.exe.
The PuTTY Key Generator window is displayed, as shown in Figure 6-24.
- In the Parameters area, select the private key type, for example SSH-2 DSA.
- Set the private key size.
For security purposes, set Number of bits in a generated key to 2048 or more.
- Click Generate.
- Click Save public key and Save private key to save the generated public and private keys to the client.
- Log in to the iBMC WebUI. For details, see Logging In to the iBMC WebUI.
- On the iBMC WebUI, choose .
- In the SSH Public Key Management area, click Add.
The window for importing the SSH public key is displayed, as shown in Figure 6-25.
- Enter the name of the current user.
- Select the SSH user for whom the SSH public key is to be imported.
- In Public Key Import Mode, select File.
- Click Browse and select the public key generated in Generate an SSH private key.
- Click Save.
- On the PC, run putty.exe.
- Import the private key generated in Generate an SSH private key.
Figure 6-26 shows the interface for importing a private key.
- Set the user login information.
Enter the iBMC address and SSH port number, as shown in Figure 6-27.
- Click Open.
- Enter the SSH user name.
The iBMC CLI is displayed.
Generate an SSH private key.
Import the public key to the iBMC.
Configure the SSH client.
Log in to the iBMC CLI.