The tag has no wiki summary.

learn more… | top users | synonyms

28
votes
8answers
4k views

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access ...
21
votes
4answers
6k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
19
votes
2answers
20k views

public key authentication fails ONLY when sshd is daemon

I have no clue on how this happens. The distro is Scientific Linux 6.1 and everything is set up to perform authentication via public key. Yet, when sshd is running as a daemon (service sshd start), it ...
15
votes
5answers
9k views

SSH: Do you use one private/public key pair for each remote machine? Or a single pair for all?

When you want to have public key based ssh logins for multiple machines, do you use one private key, and put the same public key on all of the machines? Or do you have one private/public key pair for ...
10
votes
3answers
6k views

How do I setup sshd on Mac OS X to only allow key-based authentication?

I have a Mac OS X machine (Mac mini running 10.5) with Remote Login enabled. I want to open the sshd port to the Internet to be able to login remotely. For security reasons I want to disable remote ...
9
votes
15answers
3k views

How to manage rack keys?

As a result of a security audit there's the need to lock the racks and manage the keys: Keep the keys safe Record key usage Complying with these two requirements has many challenges as there are a ...
8
votes
4answers
11k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
7
votes
3answers
848 views

SSH key management software? [closed]

I'm trying to find good software to handle SSH keys in my organization. So far I've found keymaster by Envylabs. SKM by Jerome Boismartel. Both could be option if we had only couple of users but ...
6
votes
3answers
6k views

How can I properly sign a package I modified and recompiled?

I ran dpkg-buildpackage after getting a apt-get source nginx of a backports version of nginx and modifying debian/rules to include the uwsgi module. The last results of the command were: dpkg-deb: ...
6
votes
2answers
2k views

SSH keys management system

I'm looking to switch from password based (which I starting to become overwhelmed with) to SSH keys based system. I'd like to know if there any SSH keys management system or server solution, which ...
5
votes
1answer
132 views

Finding Windows keys in use throughout corporation

We own a lot of Windows desktop keys (XP, Vista, and Windows 7) and have documented their usage and availability. Now the documentation has fallen behind and we don't know what keys are used where. Of ...
5
votes
2answers
8k views

IIS 7.5, Encryption Keys, and HRESULT: 0x80090005

When trying to assign a domain account to an IIS 7.5 app pool I get the following error: Details: Bad Data. (Exception from HRESULT: 0x80090005) My research shows that this can happen when you copy ...
5
votes
1answer
155 views

Policies for maintaining access credentials on EC2

Managing EC2 access keys and X.509 certificates can become challenging when you start to deal with large numbers of instances. Do any EC2 users here have good policies and/or tools for: rotating ...
4
votes
4answers
1k views

Enforce SSH key passwords?

I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse. How can I make sure that only SSH keys which have passwords ...
4
votes
1answer
5k views

How to generate a key file out of a .cert?

I have received a p7b file from my co-worker and he asked me to install it on one of our servers. It looks like p7b is same as .cert file. I looked up google to find out how to install the file and it ...
4
votes
1answer
1k views

What are the Jenkins/Hudson key files for?

After I have installed Jenkins (on Windows), the program folder contains, among others, two files: identity.key (28 lines) -----BEGIN RSA PRIVATE KEY----- MIIEow...... ... -----END RSA PRIVATE ...
3
votes
3answers
2k views

How to stop SSH from falling back to password?

A script regularly initiates an SSH connection from one server to another, using SSH keys. However, once, the keys were briefly overwritten. This caused the SSH client to fall back to asking for a ...
3
votes
4answers
7k views

Why isn't my public key allowing me to sign in without a password?

On my home network I have a server running Ubuntu and another desktop running Windows 7. I'm using cygwin on the Windows machine to ssh into the server. I attempted to set up keys between these two ...
3
votes
3answers
2k views

Two-Factor Authentication - SSH using Keys & Local Account Password

Is it possible and feasible to setup a linux box to first require a valid key file before prompting for the user's local account credentials? Our setup is that we have to open ssh on a machine to the ...
3
votes
1answer
43 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
3
votes
1answer
744 views

Can an AWS CloudFormation create a KeyPair to subsequently use when starting instances?

I would like to launch my stack using a keypair that is created as part of the CloudFormation. Is that possible? .... "Resources": { "ReverseProxyKeyPair": { "Type": ...
3
votes
2answers
3k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
3
votes
1answer
3k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
3
votes
1answer
1k views

[Shift]+[F1] not working in putty telnet sessions

Update: I configured putty (Windows 8; x64) to send exactly the same data as an old 16 bit Hyperterminal (Windows XP). I tested it using Wireshark. But still the Software on the Suse Server does not ...
3
votes
4answers
6k views

sftp and public keys

I am trying to sftp into an a server hosted by someone else. To make sure this worked I did the standard sftp user@sftp.xxxxxx.com i was promted with the password and that worked fine. I am setting ...
3
votes
2answers
376 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
2
votes
2answers
1k views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify ...
2
votes
3answers
607 views

ssh key questions

I have some questions regarding generating keys for ssh access: (1) Supposed there are two computers running ssh server service and I have generated a pair of key files on computer A and copy the ...
2
votes
3answers
833 views

Can sshd authenticate each incoming connection with both a key AND a password?

I want to configure sshd to require that a connection authenticate with both a key and a password. I haven't looked at using PAM or other external authentication methods yet, but my guess at the ...
2
votes
1answer
122 views

Create private key with CSR

I have a CSR file (as a text file) and the corresponding P7B certificate. My problem is that I have to create a P12 file on a machine where I do not have created the CSR. I have created the CSR in ...
2
votes
2answers
553 views

SSH public/private key login

i'm trying to make ssh work wit pp keys. However after have followed several howto's, I still have issues with the login. Server is opensuse 12.1, client is mac. This is the verbose output: debug1: ...
2
votes
1answer
420 views

What is sshkeys-lint

I was following some instructions on a website, and it told me to run sshkeys-lint to check ssh keys. I never heard of sshkeys-lint and can't apt-get. Is this a typo?
2
votes
1answer
238 views

general ssh security - certificate authentication

I've used this article: http://developer.apple.com/library/mac/#documentation/MacOSXServer/Conceptual/XServer_ProgrammingGuide/Articles/SSH.html in order to help set up ssh certificates (I'm on mac os ...
2
votes
1answer
30 views

Using puppet to manage ntpd certificates

My company is requiring me to implement signed time in ntpd with autokey. One of the requirements for autokey to work is to generate keys on each host. All the clients are part of the same group so ...
2
votes
1answer
657 views

where does rpm install custom gpg keys?

Where does CentOS/RHEL 6 store custom gpg keys? I thought /etc/pki/rpm-gpg but I installed nginx's key but unable to find it. I see it was imported properly but where is it? wget ...
2
votes
1answer
1k views

How can I use the home, end, page-up, page-down keys on Solaris via PuTTY?

I love the shortcuts home, end, page-up, page-down, but I am unable to use them via PuTTY on Solaris servers. Windows PuTTY => Linux desktop via SSH, works fine. Windows PuTTY => Solaris ...
2
votes
1answer
4k views

Why does replication fail with error Duplicate entry for key?

We have been replicating for a year or two now with little problem. Sometimes we get an erroneous SQL query which stops replications, and we use the following commands to get it going again: STOP ...
2
votes
1answer
292 views

RPM GPG keys for RHEL6 vs older versions

Is something different about the requirements of GPG key formats in RHEL6 that is stopping my standard GPG key being imported? it installs fine on RHEL4 and RHEL5 but not RHEL6, citing the key import ...
2
votes
2answers
585 views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
2
votes
1answer
928 views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
2
votes
1answer
135 views

Correct use of RSA Key Pairs

I have recently began making use of RSA Key pairs to login to various servers I manage and wanted to get some insight on best practice as I recently ran into some issues. Is it best practice to keep ...
2
votes
2answers
554 views

Stolen Windows7 Keys! Help

I work in the IT Department of my company and we use one multi-license Windows 7 Ultimate Productkey for our in-house machines. Lately I've come to the strong suspicion, that workers from other ...
2
votes
1answer
489 views

Windows 2003 DNS TSIG transfer?

I am trying to use a Windows 2003 R2 server as a secondary dns server for my BIND 9 master. The problem is I use keys to control transfers and I dont know how to add the key to Windows so its able to ...
2
votes
1answer
536 views

Wowza on EC2 Set up and Questions

I have a wowza instance installed and running on EC2, but I can't find the keypair file. I am trying to install another wowza instance on a different aws account. I have the following questions, I'd ...
1
vote
2answers
444 views

Can I use the same password for TrueCrypt as what I used when creating my Public Key?

I created and published a Public Key using gpg. I am now creating a TrueCrypt volume and wish to use the same password. Does knowing my public key, in this instance, make my TrueCrypt volume become ...
1
vote
2answers
202 views

sshd helper program on access to authorized_keys

second question, second problem: I am searching for a way to dynamically let sshd search for public keys on my server. So, shortly spoken, I want, when authorized_keys is accessed by sshd, a helper ...
1
vote
2answers
2k views

ssh login with putty key from mac

I am trying to login to a server from a Mac with a key I made with putty (Win). The output, some of which is shown below looks like it is trying , but I dont have a passphrase, so I just hit enter ...
1
vote
2answers
1k views

How to send Alt-Tab through the Putty?

I want to use bash completion for command parameters on a remote computer. How can I send Alt-Tab combination in Putty? Is there other key combinations for this?
1
vote
2answers
778 views

consequences of deleted key pair on ec2 instance

What will happen if the keypair associated with an ec2 instance is deleted via the aws management console? Will this block access to the instance forever?
1
vote
4answers
887 views

SSH key based authentication in Perl server

I have a server written in Perl that clients connect to in order to perform some management tasks. Without going into details I would like to achieve two things: encrypt connection channel between ...