SSH

• Last modified: 2024-09-27
• Sign: JN
• Tested on: Xubuntu 22.04
• Solved: Yes

Description

To be able to use SSH at NRM, you need to provide NRM-IT with a list of computers that you are going to communicate between.

SSH-access from outside of the NRM firewall can be accomplished using VPN (see instructions here).

Recommended SSH-key generation

Currently, the recommended key encryption type is EdDSA. Such key can be generated by:

$ ssh-keygen -t ed25519

Standard location for the created key is ~/.ssh/id_ed25519, ~/.ssh/id_ed25519.pub.

The public part (.pub) is the one you send to NRM-IT when, for example, you need access to the backup server.

Remember, the private part of the key should never leave your computer!

In addition, changing your keys ("SSH-key rotation") at intervals are recommended:

1. Generate a new keypair.
2. Upload the public key to the remote server.
3. Configure the local and remote server to use the new keypair.
4. Delete the old keypair.