The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
3answers
413 views

No authorized_hosts file created

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
1
vote
1answer
9 views

Remote Entry of PRE-BOOTDrive Encryption Key

I have a client with approximately 30 machines in a domain and each machine has Endpoint Encryption requiring a key to be entered at the machine keyboard each time the system is rebooted. These are ...
-3
votes
2answers
53 views

delete several reg with bat

i need to delete several bad reg key. example reg delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ /v "faiawu" /f 2>nul reg delete HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\...
0
votes
1answer
22 views

When a client connects using an already-connected keys, it is the older client that is disconnected, rather than the newer being dissmissed

For administrative purposes some people from an administrative team share the same key to a server and it happens sometimes that one of them is already connected to the server when another is also ...
0
votes
0answers
42 views

Ubuntu 14.04 SSH from Third Party, No Error Cause

I have two instances of Ubuntu 14.04 running. I am utilizing a third party service that accesses the instance(s) via ssh using its own generated key pair, of which it provides me the public key. I ...
0
votes
0answers
48 views

DNSSEC Key Rollover

I trie to get the auto key rollover to get to work on my testsystem: /etc/bind/named.conf.options : options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; //=============...
2
votes
0answers
98 views

EC2 SSH Login Temporarily Hangs on “Entering Interactive Session”

I've been researching this for hours now, can't figure out why this is happening. Originally marked it as internet but checked my speeds (37 down, 10 up). I went from California to Oregon, and since ...
1
vote
1answer
50 views

Google Cloud auth access key secret key?

Apologies for probably a basic question. Getting started with Google Cloud and require the access key and secret key to test online backups to Google Storage using Backup Exec 2015, however I can't ...
0
votes
1answer
398 views

Can I use kadmin (Linux) to add/remote SPNs from an Active Directory server?

Is it possible to use kadmin (Linux) to add/remote SPNs from an Active Directory server? I'm trying to add some service principles on my Active Directory server and store the keys in the local keytab ...
3
votes
2answers
7k views

How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?

We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
3
votes
1answer
264 views

Salt - What's the difference between Rejected and Denied?

So I have the salt master running on a server in my infrastructure and a few keys sitting there either accepted or unaccepted or... Either rejected or denied. My question is: What's the difference ...
0
votes
0answers
20 views

Restricting upload with SKS server

I'm considering setting up a keyserver with sks on Debian. I want anyone to be able to retrieve my key from it, but I don't want anyone to be able to add their key. How can I do that? I can't seem ...
0
votes
2answers
337 views

HOw to make rsa key pairs work in CentOS 6

I am unable to make rsa key pair authentication work on my CentOS 6.2 vps. My understanding is that if rsa authentication is properly configured no password will be requested yet it is still required ...
4
votes
1answer
2k views

Can an AWS CloudFormation create a KeyPair to subsequently use when starting instances?

I would like to launch my stack using a keypair that is created as part of the CloudFormation. Is that possible? .... "Resources": { "ReverseProxyKeyPair": { "Type": "AWS::EC2::KeyPair"...
1
vote
1answer
688 views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
1
vote
0answers
31 views

Recommendations for DNSSEC key metadata

In order to implement auto-dnssec maintain in the 9.7+ versions of BIND, one adds dates to the keys as metadata. After a lot of reading, I've come up with the following and hope that someone can ...
8
votes
2answers
2k views

SSH keys management system

I'm looking to switch from password based (which I starting to become overwhelmed with) to SSH keys based system. I'd like to know if there any SSH keys management system or server solution, which ...
26
votes
2answers
40k views

public key authentication fails ONLY when sshd is daemon

I have no clue on how this happens. The distro is Scientific Linux 6.1 and everything is set up to perform authentication via public key. Yet, when sshd is running as a daemon (service sshd start), it ...
0
votes
2answers
131 views

Key certificate interception

What prevents someone from intercepting most/all of my communication and forge a certificate? Even if I wish to get certificates from a key server, a man-in-the-middle can intercept my request and ...
0
votes
1answer
2k views

Is it possible to convert a 1024 CSR to a 2048 CSR? (Sun ONE Webserver 6.1)

For a 2004 software combination (which means a 2004 webserver) it is letting out a CSR with a 1024 key length. The company we have been purchasing the SSLs from requires a 2048 bit key length. It it ...
1
vote
1answer
803 views

DNSSEC sign-zone results in fatal failure

I have a working DNS in a VM-env for testing and learning purposes. It's a complete server from root-domain and a couple of subdomains. I've added dnssec-enable yes; into named.conf, and also ...
3
votes
1answer
8k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
-2
votes
1answer
2k views

find or locate Windows Server 2008 R2 volume license key [closed]

Need help to find and locate Windows Server 2008 R2 volume license keys from the system registry, to document what keys are with which server. I have tried Magic Jelly Bean and Produkey, but both will ...
2
votes
2answers
2k views

Deleting a Key Pair for AWS EC2 Instance with EBS

I have an AWS EC2 Instance using EBS and I want to stop the use of the current private key, and use a new one. As I understand it, merely deleting the key pair on the AWS Console just deletes the ...
0
votes
1answer
595 views

Configuring Redhat / CentOS 5 SSH to authenticate to IPA server with public keys

I'm trying to configure some Red Hat/CentOS servers to use an ipa-server on CentOS 6 for SSH authentication with public keys. I'm storing the public keys on the IPA server, which works great on ...
25
votes
4answers
11k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
1
vote
2answers
248 views

sshd helper program on access to authorized_keys

second question, second problem: I am searching for a way to dynamically let sshd search for public keys on my server. So, shortly spoken, I want, when authorized_keys is accessed by sshd, a helper ...
-2
votes
1answer
411 views

Speedup of fixing an openssl bug with 8192 bit key [closed]

This is related to this Bug-Report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747453 OpenSSL contains a set of arbitrary limitations on the size of accepted key parameters that ...
2
votes
1answer
35 views

Using puppet to manage ntpd certificates

My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
3
votes
2answers
10k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
9
votes
15answers
4k views

How to manage rack keys?

As a result of a security audit there's the need to lock the racks and manage the keys: Keep the keys safe Record key usage Complying with these two requirements has many challenges as there are a ...
0
votes
3answers
7k views

SSL troubles - Generate .key from .crt? (AlphaSSL)

This is greatly troubling me, I have generated a .csr and .key file to send to dynadot (which sends that to AlphaSSL) with this command: openssl req -out foo.com.csr -new -newkey rsa:2048 -nodes -...
0
votes
3answers
3k views

OpenVPN server throws an “access denied” error

OpenVPN refuses to start up and exists with this error ever since i upgraded Ubuntu from 1.04 to 11.10 Dec 14 19:12:38 oogle ovpn-server[32150]: OpenVPN 2.2.0 i686-linux-gnu [SSL] [LZO2] [EPOLL] [...
3
votes
1answer
92 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
4
votes
1answer
3k views

where does rpm install custom gpg keys?

Where does CentOS/RHEL 6 store custom gpg keys? I thought /etc/pki/rpm-gpg but I installed nginx's key but unable to find it. I see it was imported properly but where is it? wget http://nginx.org/...
3
votes
4answers
10k views

Why isn't my public key allowing me to sign in without a password?

On my home network I have a server running Ubuntu and another desktop running Windows 7. I'm using cygwin on the Windows machine to ssh into the server. I attempted to set up keys between these two ...
0
votes
1answer
886 views

synology nas DS213 J rsync files from ubuntu 12.04 server

I´ve a Synology DS213 J Nas System. I´m trying to sync folders from a ubuntu 12.04 webserver to the nas without password prompt. therefore I logged into the nas via terminal with root account. ...
2
votes
1answer
1k views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
2
votes
2answers
1k views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
-1
votes
1answer
30 views

Getting error while running apt-get update

I am getting the following error while running apt-get update on all of the servers. W: A error occurred during the signature verification. The repository is not updated and the previous index files ...
6
votes
2answers
10k views

IIS 7.5, Encryption Keys, and HRESULT: 0x80090005

When trying to assign a domain account to an IIS 7.5 app pool I get the following error: Details: Bad Data. (Exception from HRESULT: 0x80090005) My research shows that this can happen when you copy ...
1
vote
1answer
212 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
1
vote
2answers
157 views

SSH: How to know when an RSA key has been trusted?

my laptop apparently has changed its RSA key, so when I connect to it over SSH, I get the message of REMOTE HOST IDENTIFICATION HAS CHANGED. I don't remember if the last time I've connected to my ...
2
votes
1answer
2k views

How can I use the home, end, page-up, page-down keys on Solaris via PuTTY?

I love the shortcuts home, end, page-up, page-down, but I am unable to use them via PuTTY on Solaris servers. Windows PuTTY => Linux desktop via SSH, works fine. Windows PuTTY => Solaris server,...
0
votes
1answer
61 views

Web service for checking out / leasing a token

I run a web site on AWS that has a number of web servers (say 4 of them) running behind a load balancer. For this particular web site, I have one license key of New Relic for doing instrumentation. ...
2
votes
1answer
697 views

Wowza on EC2 Set up and Questions

I have a wowza instance installed and running on EC2, but I can't find the keypair file. I am trying to install another wowza instance on a different aws account. I have the following questions, I'd ...
9
votes
4answers
13k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
0
votes
1answer
88 views

I have changed my server, Do I need to re generate the ssl key

I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the pre-...
7
votes
3answers
975 views

SSH key management software? [closed]

I'm trying to find good software to handle SSH keys in my organization. So far I've found keymaster by Envylabs. SKM by Jerome Boismartel. Both could be option if we had only couple of users but ...
32
votes
8answers
6k views

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access ...