Dell 6.2 Enabling Public Key Au thentication for SSH Access

626| Managemen t Access DellPowerConnect W- Series ArubaOS 6.2 | User Guide
a. UnderManagement Users, click Add.
b. Select Certificate Management.
c. Select WebUICertific ate.
d. Enter the username.
e. Selectt heuser role assigned to the user upon validation of the client certificate
f. Enter the serial number fort heclient certificat e.
g. Selectt hename of the CA that i ssuedt heclient certific ate.
h. Click Apply.
In the CLI
web-server
mgmt-auth certificate
switch-cert <certificate>
mgmt-user webui-cacert <ca> serial <number> <username> < role>
Enabling Public Key Au thentication for SSH Access
The controllerallows public key authentication o f usersac cessing the controllerusing SSH. (The default is for
username/passwordauthentication.) When you import an X.509 client certificate into the controller, the certificate
is converted to SSH-RSA keys. When you enable public key authentication for SSH, the controllervalidates t he
client’s credentialswit hthe imported public keys. You can specify public key authentication only,or public key
authentication with username/password(i f the public key authentication fails, the user can login with a configured
usernameand password).
To use public key authentication, you must do the following:
1. I mport the X.509 client certificate into the controller using the WebUI, as describedi n"Importing Certificat es"
on page 637
2. Co nfigureSSH for client publickey authentication. You can optionally also select username/password
authentication.
3. Co nfigurethe username, role and client certificate.
In the WebUI
1. N avigate to the Configuration > Management > General page.
2. U nderSSH (Secure Shell) Authentication Method, select Client Public Key. You can optionally select
Username/Passwordto use both username/passwordand public key authenticatio n for SSHaccess.
3. Click A pply.
4. T o configurethe user, navigate to the Configuration > Management > A dministration page.
a. UnderManagement Users, click Add.
b. Select Certificate Management.
c. Select SSHPublic Key.
NOTE:ArubaOS recomm endsthat the username and role for SSH be the same as for the WebUI Certificate. You can optionally use
thecheckbox to copy the username and role from the Web Certificate section to the SSH Public Key section.
d. Enter the username.
e. Selectt hemanagement role assigned to the user upon validation of the client certificate.