Get-ChildItem $env:ProgramData\ssh\ssh_host_*_key | ForEach-Object Replace %WINDIR%\System32 with %ProgramFiles%, if appropriate. typically C:\ProgramData\ssh\administrators_authorized_keys).īefore the first connection, find out the fingerprint of the server’s host key by using ssh-keygen.exe for each file.įor %f in ( %ProgramData%\ssh\ssh_host_*_key ) do %WINDIR%\System32\OpenSSH\ssh-keygen.exe -l -f "%f" For these, the server uses a different location for the authorized keys file: %ALLUSERSPROFILE%\ssh\administrators_authorized_keys (i.e. Though, with the default Win32-OpenSSH configuration there is an exception set in sshd_config for accounts in Administrators group.The account that runs OpenSSH SSH Server service (typically SYSTEM or sshd) needs to have read access to the file. Set the ACL so that the respective Windows account is the owner of the folder and the file and is the only account that has a write access to them. ssh folder and the authorized_keys file, what matters are Windows ACL permissions, not simple *nix permissions. ssh folder (for the authorized_keys file) in your Windows account profile folder (typically in C:\Users\username\.ssh). Start the OpenSSH SSH Server service by clicking the Start the service.įollow a generic guide for Setting up SSH public key authentication in *nix OpenSSH server, with the following difference:.In the Properties dialog, change Startup type to Automatic and confirm. If you want the server to start automatically when your machine is started: Go to Action > Properties.Go to Control Panel > System and Security > Administrative Tools and open Services.Start the service and/or configure automatic start:.or go to Control Panel > System and Security > Windows Defender Firewall 1 > Advanced Settings > Inbound Rules and add a new rule for port 22.Replace C:\Windows\System32\OpenSSH\sshd.exe with the actual path to the sshd.exe ( C:\Program Files\OpenSSH\ssh.exe, had you followed the manual installation instructions above).
New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH SSH Server' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -Program "C:\Windows\System32\OpenSSH\sshd.exe"
If not, proceed to create and enable the rule as follows. When installed as an optional feature, the firewall rule “OpenSSH SSH Server (sshd)” should have been created automatically.Allow incoming connections to SSH server in Windows Firewall:.
0 kommentar(er)
