The tag has no usage guidance.

learn more… | top users | synonyms

32
votes
8answers
6k views

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access ...
26
votes
2answers
40k views

public key authentication fails ONLY when sshd is daemon

I have no clue on how this happens. The distro is Scientific Linux 6.1 and everything is set up to perform authentication via public key. Yet, when sshd is running as a daemon (service sshd start), it ...
25
votes
4answers
11k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
19
votes
5answers
11k views

SSH: Do you use one private/public key pair for each remote machine? Or a single pair for all?

When you want to have public key based ssh logins for multiple machines, do you use one private key, and put the same public key on all of the machines? Or do you have one private/public key pair for ...
12
votes
3answers
8k views

How do I setup sshd on Mac OS X to only allow key-based authentication?

I have a Mac OS X machine (Mac mini running 10.5) with Remote Login enabled. I want to open the sshd port to the Internet to be able to login remotely. For security reasons I want to disable remote ...
10
votes
3answers
9k views

How can I properly sign a package I modified and recompiled?

I ran dpkg-buildpackage after getting a apt-get source nginx of a backports version of nginx and modifying debian/rules to include the uwsgi module. The last results of the command were: dpkg-deb: ...
9
votes
15answers
4k views

How to manage rack keys?

As a result of a security audit there's the need to lock the racks and manage the keys: Keep the keys safe Record key usage Complying with these two requirements has many challenges as there are a ...
9
votes
4answers
13k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
8
votes
2answers
2k views

SSH keys management system

I'm looking to switch from password based (which I starting to become overwhelmed with) to SSH keys based system. I'd like to know if there any SSH keys management system or server solution, which ...
7
votes
3answers
975 views

SSH key management software? [closed]

I'm trying to find good software to handle SSH keys in my organization. So far I've found keymaster by Envylabs. SKM by Jerome Boismartel. Both could be option if we had only couple of users but ...
6
votes
2answers
10k views

IIS 7.5, Encryption Keys, and HRESULT: 0x80090005

When trying to assign a domain account to an IIS 7.5 app pool I get the following error: Details: Bad Data. (Exception from HRESULT: 0x80090005) My research shows that this can happen when you copy ...
5
votes
1answer
143 views

Finding Windows keys in use throughout corporation

We own a lot of Windows desktop keys (XP, Vista, and Windows 7) and have documented their usage and availability. Now the documentation has fallen behind and we don't know what keys are used where. Of ...
5
votes
1answer
9k views

How to generate a key file out of a .cert?

I have received a p7b file from my co-worker and he asked me to install it on one of our servers. It looks like p7b is same as .cert file. I looked up google to find out how to install the file and it ...
5
votes
1answer
157 views

Policies for maintaining access credentials on EC2

Managing EC2 access keys and X.509 certificates can become challenging when you start to deal with large numbers of instances. Do any EC2 users here have good policies and/or tools for: rotating ...
4
votes
4answers
2k views

Enforce SSH key passwords?

I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse. How can I make sure that only SSH keys which have passwords ...
4
votes
4answers
1k views

Getting key for Microsoft Office downgrade [duplicate]

I need to install Microsoft Office 2003 for some reasons related to compatibility with Luddites. I can buy an Office 2007 "open license" at the university where I am a faculty member, and I have seen ...
4
votes
2answers
2k views

consequences of deleted key pair on ec2 instance

What will happen if the keypair associated with an ec2 instance is deleted via the aws management console? Will this block access to the instance forever?
4
votes
1answer
2k views

Can an AWS CloudFormation create a KeyPair to subsequently use when starting instances?

I would like to launch my stack using a keypair that is created as part of the CloudFormation. Is that possible? .... "Resources": { "ReverseProxyKeyPair": { "Type": "AWS::EC2::KeyPair"...
4
votes
1answer
3k views

where does rpm install custom gpg keys?

Where does CentOS/RHEL 6 store custom gpg keys? I thought /etc/pki/rpm-gpg but I installed nginx's key but unable to find it. I see it was imported properly but where is it? wget http://nginx.org/...
4
votes
1answer
2k views

What are the Jenkins/Hudson key files for?

After I have installed Jenkins (on Windows), the program folder contains, among others, two files: identity.key (28 lines) -----BEGIN RSA PRIVATE KEY----- MIIEow...... ... -----END RSA PRIVATE KEY--...
4
votes
4answers
10k views

sftp and public keys

I am trying to sftp into an a server hosted by someone else. To make sure this worked I did the standard sftp user@sftp.xxxxxx.com i was promted with the password and that worked fine. I am setting ...
3
votes
3answers
2k views

How to stop SSH from falling back to password?

A script regularly initiates an SSH connection from one server to another, using SSH keys. However, once, the keys were briefly overwritten. This caused the SSH client to fall back to asking for a ...
3
votes
2answers
7k views

How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?

We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
3
votes
2answers
1k views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify http://httpd.apache.org/dev/...
3
votes
4answers
10k views

Why isn't my public key allowing me to sign in without a password?

On my home network I have a server running Ubuntu and another desktop running Windows 7. I'm using cygwin on the Windows machine to ssh into the server. I attempted to set up keys between these two ...
3
votes
1answer
264 views

Salt - What's the difference between Rejected and Denied?

So I have the salt master running on a server in my infrastructure and a few keys sitting there either accepted or unaccepted or... Either rejected or denied. My question is: What's the difference ...
3
votes
3answers
2k views

Two-Factor Authentication - SSH using Keys & Local Account Password

Is it possible and feasible to setup a linux box to first require a valid key file before prompting for the user's local account credentials? Our setup is that we have to open ssh on a machine to the ...
3
votes
1answer
92 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
3
votes
2answers
10k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
3
votes
1answer
8k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
3
votes
1answer
2k views

[Shift]+[F1] not working in putty telnet sessions

Update: I configured putty (Windows 8; x64) to send exactly the same data as an old 16 bit Hyperterminal (Windows XP). I tested it using Wireshark. But still the Software on the Suse Server does not ...
3
votes
1answer
669 views

Windows 2003 DNS TSIG transfer?

I am trying to use a Windows 2003 R2 server as a secondary dns server for my BIND 9 master. The problem is I use keys to control transfers and I dont know how to add the key to Windows so its able to ...
3
votes
2answers
682 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
2
votes
3answers
619 views

ssh key questions

I have some questions regarding generating keys for ssh access: (1) Supposed there are two computers running ssh server service and I have generated a pair of key files on computer A and copy the ...
2
votes
3answers
913 views

Can sshd authenticate each incoming connection with both a key AND a password?

I want to configure sshd to require that a connection authenticate with both a key and a password. I haven't looked at using PAM or other external authentication methods yet, but my guess at the ...
2
votes
1answer
147 views

Create private key with CSR

I have a CSR file (as a text file) and the corresponding P7B certificate. My problem is that I have to create a P12 file on a machine where I do not have created the CSR. I have created the CSR in ...
2
votes
2answers
738 views

SSH public/private key login

i'm trying to make ssh work wit pp keys. However after have followed several howto's, I still have issues with the login. Server is opensuse 12.1, client is mac. This is the verbose output: debug1: ...
2
votes
1answer
6k views

Why does replication fail with error Duplicate entry for key?

We have been replicating for a year or two now with little problem. Sometimes we get an erroneous SQL query which stops replications, and we use the following commands to get it going again: STOP ...
2
votes
1answer
489 views

What is sshkeys-lint

I was following some instructions on a website, and it told me to run sshkeys-lint to check ssh keys. I never heard of sshkeys-lint and can't apt-get. Is this a typo?
2
votes
1answer
249 views

general ssh security - certificate authentication

I've used this article: http://developer.apple.com/library/mac/#documentation/MacOSXServer/Conceptual/XServer_ProgrammingGuide/Articles/SSH.html in order to help set up ssh certificates (I'm on mac os ...
2
votes
2answers
3k views

How can I decrypt an SSH session with both public and private keys?

Is it possible to decrypt an SSH session with the public AND private key used for the session? I have a network capture of the packets, and I have no idea what tools I'd be able to use to do so. Can ...
2
votes
2answers
2k views

Deleting a Key Pair for AWS EC2 Instance with EBS

I have an AWS EC2 Instance using EBS and I want to stop the use of the current private key, and use a new one. As I understand it, merely deleting the key pair on the AWS Console just deletes the ...
2
votes
1answer
35 views

Using puppet to manage ntpd certificates

My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
2
votes
1answer
2k views

How can I use the home, end, page-up, page-down keys on Solaris via PuTTY?

I love the shortcuts home, end, page-up, page-down, but I am unable to use them via PuTTY on Solaris servers. Windows PuTTY => Linux desktop via SSH, works fine. Windows PuTTY => Solaris server,...
2
votes
1answer
306 views

RPM GPG keys for RHEL6 vs older versions

Is something different about the requirements of GPG key formats in RHEL6 that is stopping my standard GPG key being imported? it installs fine on RHEL4 and RHEL5 but not RHEL6, citing the key import ...
2
votes
2answers
1k views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
2
votes
1answer
1k views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
2
votes
1answer
153 views

Correct use of RSA Key Pairs

I have recently began making use of RSA Key pairs to login to various servers I manage and wanted to get some insight on best practice as I recently ran into some issues. Is it best practice to keep ...
2
votes
2answers
580 views

Stolen Windows7 Keys! Help

I work in the IT Department of my company and we use one multi-license Windows 7 Ultimate Productkey for our in-house machines. Lately I've come to the strong suspicion, that workers from other ...
2
votes
0answers
98 views

EC2 SSH Login Temporarily Hangs on “Entering Interactive Session”

I've been researching this for hours now, can't figure out why this is happening. Originally marked it as internet but checked my speeds (37 down, 10 up). I went from California to Oregon, and since ...