Topic - Summary of public key authentication for SSH

This page summarizes the information about password authentication for SSH. Click Next to return to the topics page of this section.

• Public key authentication for SSH requires a public-private key pair. The public key must be placed on the host where SSH server resides. The private key must be placed on the workstation that launches the SSH client.

• The steps in configuring a VT Display session for SSH client authentication using public key authentication are:
  1. Use keytool to generate a public-private key pair.
     • keytool is included in the Java 1.4 JRE and is distributed with Host On-Demand.

  2. Use the Export Public Key utility to extract the public key from the keystore to a separate file.
     • The Export Public Key utility is integrated with the SSH configuration window for the VT Display session configuration.

  3. Configure the SSH server with the public key.
     • Each SSH server has different requirements. Consult the system administrator for the SSH server that you intend to use.

  4. Copy the keystore file to the workstation for the SSH client.
     • Place the keystore file in the same directory that you intend to specify in the KeyStore File Path field of the SSH configuration window.

  5. Configure the VT Display session for public key authentication.
     • In the fields of the SSH configuration window, you can either specify a value or leave the field blank, causing Host On-Demand to use a default value when it tries to start the SSH connection.

• If public key authentication is not working, check the list of troubleshooting suggestions.

• The Host On-Demand configuration includes a flexibility that allows you to create one VT Display session profile for many users, multiple client platforms, and multiple user ids.