My SSH keys for privileged access

To enter a recorded session with your own SSH client, the appliance needs to know the connection is yours. It does so with your SSH public key, registered in the console. The private key never leaves your computer.

How do I add my key?

1. If you have no key yet, create one on your computer, for example with ssh-keygen -t ed25519.
2. In the console, open «Access» › «My SSH keys».
3. Choose «Add key».
4. In «Label», type a name you will recognise (up to 64 characters), for example "Laptop".
5. In «Public key (one OpenSSH line)», paste the contents of the .pub file (a single line).
6. Confirm. «Key added.» appears.

Which keys are accepted?

One ssh-ed25519, ecdsa-sha2-nistp256 or rsa-sha2-512 public key line. If you paste anything else, the console says: «Paste one ssh-ed25519, ecdsa-sha2-nistp256 or rsa-sha2-512 public key line.»

Never paste the private key (the file without .pub).

How do I revoke a key?

In the list, choose «Revoke» on the key. «Key revoked.» appears. Do it when you change computers or suspect the private key was copied.

Is the key enough to get in?

No. The key only identifies your SSH client to the appliance. You always need an active lease, requested and activated under «My access». See Request privileged access.

I would rather not use keys

Use «Open web terminal»: the terminal in the browser needs no SSH key.