15.6.2 Generating Public Keys (Linux)

To generate new SSH key pairs use the Linux ssh-keygencommand. This will produce an RSA or DSA public/private key pair and you will be prompted for a path to store the two key files, for example, id_dsa.pub (the public key) and id_dsa (the private key). For example:

$ ssh-keygen -t [rsadsa]

Generating public/private [rsadsa] key pair.

Enter file in which to save the key (/home/user/.ssh/id_[rsadsa]):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /home/user/.ssh/id_[rsadsa].

Your public key has been saved in /home/user/.ssh/id_[rsadsa].pub.

The key fingerprint is:

28:aa:29:38:ba:40:f4:11:5e:3f:d4:fa:e5:36:14:d6 user@server

$

Create a new directory to store your generated keys. You can also name the files after the device they will be used for. For example:

$ mkdir keys

$ ssh-keygen -t rsa

Generating public/private rsa key pair.

Enter file in which to save the key (/home/user/.ssh/id_rsa): /home/user/keys/control_room Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /home/user/keys/control_room Your public key has been saved in /home/user/keys/control_room.pub. The key fingerprint is: 28:aa:29:38:ba:40:f4:11:5e:3f:d4:fa:e5:36:14:d6 user@server

$

Make sure that there is no password associated with the keys. If there is a password, then the Black Box devices will have no way to supply it as runtime.

Full documentation for the ssh-keygencommand can be found at http://www.openbsd.org/cgi- bin/man.cgi?query=ssh-keygen

15.6.3 Installing the SSH Public/Private Keys (Clustering)

For Black Box console servers, the keys can be simply uploaded through the web interface, on the System: Administration page. This enables you to upload stored RSA or DSA Public Key pairs to the Master and apply the Authorized key to the slave and is described in Chapter 4. Once complete, you then proceed to Fingerprinting as described below.

_____________________________________________________________________

724-746-5500 blackbox.com

Page 252

Page 252
Image 252
Black Box LES1132A Generating Public Keys Linux, $ ssh-keygen -t rsadsa, 28aa2938ba40f4115e3fd4fae53614d6 user@server