Create an SSH Key

 

To get access to the AWS platform, a SSH keypair is required.


Linux/MacOS

An SSH-Key-Pair can be generated with the resources of each Linux / Unix derivative.

The following command is used to generate a key pair with the following properties via a terminal:

  • An SSH private key is created in the path specified by -f . The SSH public key is also created in the same directory. This has the same name, but ends with ".pub". We recommend this option to overwrite existing keys in the standard directory!

  • -b specifies the strength of the key. It should never be less than 4096.

  • -C is an optional comment

ssh-keygen -t ed25519 -f /Pfad/zum/privateKeyFile -C "Kommentar"

FIDO2

FIDO2 secured SSH keys (e.g. using an Yubikey) are supported on servers running at least Ubuntu 20.04. You can generate such a key like this:

ssh-keygen -t ecdsa-sk -f /Pfad/zum/privateKeyFile -C "Kommentar"

The native MacOS SSH installation does not work with FIDO2 keys, so you need to add some configuration via brew.

brew install openssh brew tap theseal/ssh-askpass brew install michaelroosz/ssh/libsk-libfido2-install # reload shell, e.g. by opening a new tab or window

Windows (Puttygen)

The puttygen.exe tool is required for generating in Windows. The tool can be downloaded eg at https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html .

Once the program is started, please make the following settings:

  • Parameters> Type of keys: SSH-2 RSA

  • Parameters> Number of bits: at least 2048 (default) - better 4096

  • Key comment: please provide a name

After this, a key can be generated via the [GENERATE] button. The public part as well as the secret can be saved via the [Save public key] and [Save private key] buttons. Root360 requires either the public key or the "OpenSSH key" shown in the upper section (the latter is preferred).

 

SSH key transmission

After successful creation of your SSH key, your the public part of your SSH key has to be sent to the ticket system to get provisioned.

Never share your private key to any another person

 

root360 Knowledge Base - This portal is hosted by Atlassian (atlassian.com | Privacy Policy)