VMware ESXi 8
Sponsored Link

SSH : Key-Pair Authentication2023/12/22

Generate SSH Key-Pair and set Authentication by it.
If you like to enable SSH service always, you shoud set Key-Pair and also should disable password authentication method.
[1] Generate SSH Key-Pair on the shell.
# create key-pair


Generating public/private rsa key pair.
# set key-store location like follows (default on ESXi sshd_config)
# for other users ⇒ /etc/ssh/keys-(username)
Enter file in which to save the key (//.ssh/id_rsa): /etc/ssh/keys-root/id_rsa
Enter passphrase (empty for no passphrase):   # set passphrase (if set no passphrase, Enter with empty)
Enter same passphrase again:
Your identification has been saved in /etc/ssh/keys-root/id_rsa
Your public key has been saved in /etc/ssh/keys-root/id_rsa.pub
The key fingerprint is:
SHA256:Vd4V3+tVLb0JCk6F0f218EqNPoq3HRdtHw/vf68pm3U root@ctrl.srv.world
The key's randomart image is:

ll /etc/ssh/keys-root

total 16
drwxr-xr-x    1 root     root           512 Dec 22 05:17 .
drwxr-xr-x    1 root     root           512 Dec 22 04:43 ..
-rw-------    1 root     root          2655 Dec 22 05:17 id_rsa
-rw-r--r--    1 root     root           573 Dec 22 05:17 id_rsa.pub

cat /etc/ssh/keys-root/id_rsa.pub >> /etc/ssh/keys-root/authorized_keys

# to disable password input authentication method too, set like follows

vi /etc/ssh/sshd_config
# line 10 : change to [no]

# line 34 :
# password authentication = no
# keyboard interactive authentication = no (add the line)

PasswordAuthentication no
KbdInteractiveAuthentication no
/etc/init.d/SSH restart

SSH login disabled
SSH login enabled
[2] Transfer the secret key [/etc/ssh/keys-root/id_rsa] on ESXi Host to any client computer and verify SSH access with Key-Pair Authentication.
# [id_rsa] file transfered from ESXi Host

[root@localhost ~]#
ll ~/.ssh

total 12
-rw-------. 1 root root 2655 Dec 22 14:24 id_rsa
-rw-------. 1 root root  734 Dec 22 13:46 known_hosts
-rw-r--r--. 1 root root  171 Dec 22 13:46 known_hosts.old

[root@localhost ~]#
ssh root@ctrl.srv.world uname -a

Enter passphrase for key '/root/.ssh/id_rsa':
VMkernel ctrl.srv.world 8.0.2 #1 SMP Release build-22380479 Sep 4 2023 15:00:49 x86_64 x86_64 x86_64 ESXi
Matched Content