Configuring the SSH User Private Key

Operation Scenario

Configure the SSH private key.

After the SSH private key has been loaded on the user client and the iBMC, the user can log in to the iBMC CLI over SSH without entering a password. This access mode is recommended due to higher security and easier operation.

Prerequisites

Conditions

• The client (local PC) can communicate with the server iBMC.
• The SSH interface has been enabled on the iBMC.

Data

• SSH public key type: RSA or DSA
• IP address of the iBMC management network port
• SSH service port number

Software

• A free tool, such as putty.exe, to log in to the iBMC
• A free tool, such as puttygen.exe, to generate private keys

Procedure

• Generate an SSH private key.

1. On the client (such as a PC), run puttygen.exe.

   The PuTTY Key Generator window is displayed, as shown in Figure 6-26.

   Figure 6-26 Private key generation
   
2. In the Parameters area, select the private key type, for example SSH-2 DSA.
3. Set the private key size.
4. Click Generate.
5. Click Save public key and Save private key to save the generated public and private keys to the client.

• Import the public key to the iBMC.

1. Log in to the iBMC WebUI. For details, see Getting Started > Login.
2. On the iBMC WebUI, choose User & Security > Local Users.
3. Locate the user for which the SSH public key is to be imported, and click to the left of the user name.
4. Click Upload next to SSH Public Key.

   The dialog box shown in Figure 6-27 is displayed.

   Figure 6-27 Upload SSH public key
   
5. Select the import mode.

   Select Public key file or Public key text.

6. Click to select the public key.
7. Enter current password.
8. Click OK.

   For security purposes, periodically update the NTP group key.

• The public key is imported.

1. Click Browse and select the public key generated in Generate an SSH private.....
2. Click Save.

• Configure the SSH client.

3. On the PC, run putty.exe.
4. Import the private key generated in•Generate an SSH private....

   Generate an SSH private... shows the interface for importing a private key.

   Figure 6-28 Importing a private key
   
5. Set the user login information.

   Enter the iBMC address and SSH port number, as shown in Figure 6-29.

   Figure 6-29 Setting login information
   

• Log in to the iBMC CLI.
  1. Click Open.
  2. Enter the SSH user name.

     The iBMC CLI is displayed.