SSH keys are a means of authenticating a user to an SSH server without using a password. Each “key” is actually a key pair consisting of a public key and a private key.
Keys are more secure than passwords because they are significantly more complex. While a password of eight characters is 72 bits long, SSH keys are often 2048 bits or longer. This longer string has many more possible permutations and therefore takes much more time to crack with a brute force attack.
If you require SSH access for multiple users, the use of SSH keys instead of individual logins can bypass many of the headaches involved in user management without violating PCI DSS. For details, see What are the advantages of using SSH keys to control access for multiple users?
Method
Putty does not store keys in an OpenSSH-compatible format. You need to use the 'puttygen' tool to manipulate your private key. (via this document, via Google): To change or set a passphrase on an SSH key under PuTTY, do the following: Run the puttygen.exe program. Click on the 'Load' button.
The process involves generating a pair of SSH key files containing a private key and a public key. The private key is known only to the user’s computer; the public key will be known to the server. Each key is useless without the other; therefore, only individuals with both the private and the public key can gain access to the server, and the private key is never revealed to the server.
Take special care to not lose the private key. A lost private key cannot be replicated; therefore, users cannot access the server until an administrator generates a new key pair. If you lose access to your server due to a lost key, contact our Support Team for assistance.
- We are occasionally asked if PuTTY could acquire the ability to use foreign private key formats. The PuTTY suite supports these key formats, in the sense that PuTTYgen can load and save them and convert them into PuTTY's own PPK key format; but a conversion step is required, because PuTTY itself does not include the foreign key import code.
- PuTTYgen is an key generator tool for creating SSH keys for PuTTY. It is analogous to the ssh-keygen tool used in some other SSH implementations. The basic function is to create public and private key pairs. PuTTY stores keys in its own format in.ppk files. However, the tool can also convert keys to and from other formats.
- The author of the quoted blog post goes on to explain how OpenSSL supports the PKCS#8 format (about which I know precisely nothing), offering protection against brute-forcing encrypted private keys that have fallen into the wrong hands through key stretching (PBKDF2). However, my own valuable private keys are stored in Putty's own.PPK format.
Though there are varying methods of generating SSH keys on machines using Windows, this one uses PuTTY Key Generator.
Why Does Putty Require Its Own Key Generator Download
1: Generate the key
ATTENTION: The procedure and screen captures in this section reflect the latest version of PuTTY as of July 21, 2017 (0.70). If you use a different version, your interface may differ from the one pictured.
Download and install PuTTY.
ATTENTION: In Step 2 below, if you are using a pre-0.70 version of PuTTY, then select SSH-2 RSA radio button instead.
In the Type of key to generate section, select the RSA radio button.
In the Number of bits in a generated key field, type 4096.
Click Generate.
Move your mouse cursor in the area below the progress bar. When the progress bar is full, PuTTY generates your key pair.
- (Optional) Type a passphrase in the Key passphrase field. Repeat this passphrase in the Confirm passphrase field. If you plan to use your keys for automated processes; skip this step.
- Click the Save private key button to save the private key in a secure location. Use any name you like.
- Right-click in the text field labeled Public key for pasting into OpenSSH authorized_keys file and choose Select All.
- Right-click again in the same text field and choose Copy.
2: Upload the SSH key
Follow the procedure in How to reset your SSH password and add SSH keys in SiteWorx. In Step 3 of that article, paste the public SSH key you copied during Step 8 above section.
Generate Cydia Key - 7evasi0n. Cydia key generator without survey.
For 24-hour assistance any day of the year, contact our support team by email or through your Client Portal.