Tripp Lite B093-004-2E4U-V Owner's Manual

Loading ...

4.6.2 Manually Generate and Upload SSH Keys

Alternately, if you have a RSA or DSA key pair you can manually upload them to the Primary and Secondary console servers.

Note: If you do not already have RSA or DSA key pair and you do not wish to use you will need to create a key pair using ssh-keygen,

PuTTYgen or a similar tool as detailed in 15.6 Secure Shell (SSH) Public Key Authentication.

To manually upload the public and private key pair to the Primary console server:

• Select System: Administration on the Primary unit’s management console.

• Browse to the location you saved the RSA (or DSA) public key and upload it to SSH RSA (DSA) Public Key.

• Browse to the saved RSA (or DSA) private key location and upload it to SSH RSA (DSA) Private Key.

• Click Apply.

Next, you must register the public key as an authorized key on the Secondary unit. You will only need to upload one RSA or

DSA public key for each Secondary unit.

Note: The use of key pairs may be confusing because in many cases, one ﬁle (public key) fulﬁlls two roles – public key and authorized key.

For a more information, refer to 15.6 Secure Shell (SSH) Public Key Authentication.

Select System: Administration on the Secondary unit’s management console

• Browse again to the saved RSA (or DSA) public key and upload it to the Secondary unit’s SSH Authorized Key.

• Click Apply.

The next step is to Fingerprint each new Secondary-Primary connection. This once-off step will validate your SSH session. On

ﬁrst connection, the Secondary will receive a ﬁngerprint from the Primary unit, which will be used on all future connections:

• To establish the ﬁngerprint, ﬁrst log in to the Primary server as root and establish an SSH connection to the Secondary

remote host:

# ssh remhost

Once the SSH connection has been established you will be asked to accept the key. Answer yes and the ﬁngerprint will be

added to the list of known hosts. Refer to 15.6 Secure Shell (SSH) Public Key Authentication for more information.

• If asked to supply a password, there is a problem with uploading keys. The keys should remove any need to supply a

password.

4. Serial Port, Host, Device and User Conﬁguration

Loading ...

Tripp Lite B093-004-2E4U-V 4-Port Console Server with 4G LTE Cellular Gateway, Dual GbE NIC, 4Gb Flash and Dual SIM