I'm working for a client here who has set up an EC2 instance for me to configure. I've installed the software asked for, now all I need to do is open up some ports. I'm currently SSH'd into the machine, it's running Ubuntu 10.04.

I've installed the ec2-ami-tools and the ec2-api-tools packages, and have tried running the following, as has been recommended elsewhere:

ec2-authorize -p 1024 default

Unfortunately, this just fails and leaves me with this nasty error message:

Required option '-K, --private-key KEY' missing (-h for usage).'

Evidently I need a key to do this, so I copied my PEM key which I received with the instance to the server and ran it again with the key:

ec2-authorize -p 1024 -K mykey.pem default

Now it's asking for a certificate:

Reqired option `-C, --cert CERT' missing (-h for usage).`

Ugh. I don't really have a certificate, so what exactly is it asking me for? I don't have access to the EC2 web interface, so how can I open a port from the Ubuntu server itself?


AWS issues X.509 certificates to authenticate these requests... You'll have to have the client go into AWS and generate one for you - there is no way to do what you are asking without proper authentication.

|improve this answer|||||
  • Perfect, that's what I was looking for. I'll just have the client open the port, as that seems the easiest option for right now. – Naftuli Kay Aug 5 '11 at 16:39

To use the ec2-api-tools you need to have a X.509 certificate: http://docs.amazonwebservices.com/AWSSecurityCredentials/1.0/AboutAWSCredentials.html#EC2Credentials

To get your cerificate, you need to go to Account > Security Credentials > Access Credentials > X.509 Certificates. More details can be found at: http://docs.amazonwebservices.com/AWSSecurityCredentials/1.0/AboutAWSCredentials.html#X509Credentials

You may be able to craft a request to the REST API using just your Access Keys and AuthorizeSecurityGroupIngress: http://docs.amazonwebservices.com/AWSEC2/latest/APIReference/ApiReference-query-AuthorizeSecurityGroupIngress.html

|improve this answer|||||

Easy way :

go amazon ec2 console from your amazon account(web) and edit security group default

More complex way:

you have ask generate new certificate from person with access to web.

sorry, i can't change security settings without have access(certificate), that have security reason ;) u need both key and cerificate.

read this article


|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.