Generating Keys for the SSH Gateway

 

You need to download the most recent version of PuTTY, Pageant and Puttygen.

First, you need these programs:

  • Start puttygen.exe
  • Select the type of key you want (ssh2 dsa is recommended)
     
  • Click on Generate
    ** Please Note the instructions tell you to move the mouse over the window
    in order to create randomness while the key is generating.
     
  • Enter a key passphrase (remember, all users MUST USE a passphrase)
  • Confirm the passphrase
  • Highlight the contents of the "Public key for pasting into OpenSSH authorized_keys2 file :”
    and copy it to your clipboard by hitting Ctrl+C

You MUST email this Public Key to the ITD Helpdesk who will forward this to the Account Management Office. You have two options; You can email the Public Key by using your favorite email client or by using our online form.

You MUST save your Private Key. If you don't save the key or you lose it, the associated Public Key will not work!
  - Click on "Save Private Key


  • Choose a name for the Private Key and click save.
  • You should always save your Public Key.
  • Now fire up pageant. You should see a little icon in your system tray (next to the clock).

    Doubleclick the pageant icon and enter your passphrase when asked.


     
  • Click on "Add Key"
  • In the dialog box choose your private key and click open.

    Enter your passphrase



     
  • If you did it right, your key should now appear in the key list.


     
  • Once your Public Key is installed by Account Management, you should test it ensure it is working correctly.
      - Now test your key
  • Start PuTTY

    Click on the SSH tab on the right hand side and configure as follows:

  • Now it is time to test the connection.

    You should only have to enter your username, and the pageant process should take over, and log you in automatically.

 

If you have a question that is not addressed in these pages, please send an email to itdhelp@bnl.gov.

Top of Page

Last Modified: January 31, 2008
Please forward all questions about this site to: Web Services