1
vote
1answer
93 views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
3
votes
2answers
859 views

Is disabling password login for SSH the same as deleting the password for all users?

I have a cloud server with only a root user. I SSH to it using RSA keys only. To make it more secure, I wanted to disable the password feature. I know that this can be done by editing the ...
-2
votes
1answer
53 views

Do any well-known CAs issue Elliptic Curve certificates (now that all others are hackable)? [closed]

I know it had been asked before here, but that was back in 2009. Now that it is widely supported by browsers (Requires TLS 1.1, only added in Chrome 22+, FF 23 released Aug 8 2013, IE9+), AND can ...
1
vote
2answers
66 views

SSH: How to know when an RSA key has been trusted?

my laptop apparently has changed its RSA key, so when I connect to it over SSH, I get the message of REMOTE HOST IDENTIFICATION HAS CHANGED. I don't remember if the last time I've connected to my ...
8
votes
2answers
6k views

How to check if a RSA public / private key pair matched

I have two files, id_rsa and id_rsa.pub, what command can be used to validate if they are the valid pair.
2
votes
1answer
129 views

Correct use of RSA Key Pairs

I have recently began making use of RSA Key pairs to login to various servers I manage and wanted to get some insight on best practice as I recently ran into some issues. Is it best practice to keep ...
1
vote
1answer
229 views

Accessing Citrix XenDesktop from outside the domain / firewall

My understanding of accessing a Citrix XenDesktop from a home PC is: Download the Citrix plugin. Go to the Citrix XenDesktop server in a web browser. Type in information, including PIN and number ...
0
votes
4answers
1k views

Despite all the information available, I'm stumped on passwordless logins. Help?

So I have my home computer & a server. I want the server to be able to SSH into my home computer w/out a password. I have followed various tutorials and can ssh from home to server with no ...
13
votes
2answers
4k views

Possible to change email address in keypair?

I've created an RSA keypair that I used for SSH, and it includes my email address. (At the end of the public key.) I've now changed my email address. Is it possible to change the email address on ...
3
votes
1answer
80 views

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
3
votes
2answers
255 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
1
vote
1answer
194 views

RSA fingerprint [closed]

what is the benefits of SSH RSA Fingerprint? and how does it different from PGP ? also how can i use it? are there any tool to do this? regards
3
votes
1answer
209 views

Onscreen keyboard with RSA Authentication Agent on WIndows

I'm attempting to integrate a touch panel into our secured environment. As such, the touchpanel requires that the user login via RSA SecurID. Unfortunately, there is no exposed keyboard for the user ...
0
votes
1answer
206 views

Using RSA SecurID without a Windows Domain

I have a bunch of PCs I'd like to secure with RSA SecurID tokens. However, they're not part of any Windows domain. Is this doable? Anyone any experience with that?
5
votes
2answers
329 views

When routers communicate with HTTPS, how is their identity confirmed?

There's something I don't understand. Possibly I have some misunderstanding about how HTTPS works. I heard that some wireless routers allow the user to access the administration page with HTTPS ...
0
votes
2answers
308 views

setting minimum size of accepted rsa key

Is there a way to set the minimum size accepted by sshd as an RSA public key? I want to restrict users to using RSA keys that are generated with ssh-keygen -b 8196 or greater. I didn't see any ...
0
votes
1answer
3k views

RSA Authentication Manager - Unable to resolve principal by login ID and/or alias

I'm attempting to setup a RSA authentication manager with a Microsoft Active Directory as the identity source. When I try to login from the Windows login client the login attempt failed and I recieve ...
7
votes
3answers
10k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
2
votes
3answers
336 views

Anyone know if there's a way to report on “lost status” tokens in RSA?

I want to get a report of all users whose tokens are in "lost status" from RSA. Is this do-able?
0
votes
6answers
3k views

software version of the RSA SecurID?

Is there a software version of the securID fob below: I remember reading that the algorithm for the key generation had been broken & that there was a software utility available, where if you ...
82
votes
6answers
24k views

SSH keypair generation: RSA or DSA?

SSH supports two signature algorithms for key pairs: RSA and DSA. Which is preferred, if any? For RSA, what is the minimum acceptable key length?
14
votes
5answers
38k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...