SSH Keys Pilot/en: Difference between revisions
(Updating to match new version of source page) |
(Updating to match new version of source page) |
||
| Line 7: | Line 7: | ||
== Important dates == | == Important dates == | ||
'''Starting on November 1, 2021''': Authentication on '''Niagara''' and '''Mist''' with SSH keys will only accept keys that have been uploaded to the CCDB. Keys that are only in .ssh/authorized_keys will no longer work. | '''Starting on November 1, 2021''': Authentication on '''Niagara''' and '''Mist''' with SSH keys will only accept keys that have been uploaded to the CCDB. Keys that are only in <tt>.ssh/authorized_keys</tt> will no longer work. | ||
'''Every Monday of November 2021''': From 10:00AM to noon Eastern time, authentication on '''Niagara and Mist''' will only be possible with SSH keys. Authentication using passwords will be disabled. | '''Every Monday of November 2021''': From 10:00AM to noon Eastern time, authentication on '''Niagara and Mist''' will only be possible with SSH keys. Authentication using passwords will be disabled. | ||
| Line 15: | Line 15: | ||
== What you need to do == | == What you need to do == | ||
To learn about SSH keys, see the drop-in sessions on https://support.scinet.utoronto.ca/education/go.php/586/index.php/ib/1//p_course/586 | To learn about SSH keys, see the drop-in sessions on https://support.scinet.utoronto.ca/education/go.php/586/index.php/ib/1//p_course/586. | ||
'''If you know how to use SSH keys''', | '''If you know how to use SSH keys''', | ||
| Line 25: | Line 25: | ||
Additional documentation on usage and best practices is also available in [[SSH Keys]] | Additional documentation on usage and best practices is also available in [[SSH Keys]] | ||
== | == Support == | ||
If you still have questions or need assistance after reading these documents, please register and join one of the following sessions: | If you still have questions or need assistance after reading these documents, please register and join one of the following sessions: | ||
Revision as of 18:50, 14 October 2021
In our continuous efforts to secure our national infrastructure, we have implemented a new feature in the CCDB whereby public SSH keys can be uploaded to your account and used to connect to our clusters (Cedar, Graham, Béluga and Niagara and Mist).
We are evaluating the possibility of enforcing authentication with SSH keys to access all of our clusters; therefore we will be conducting a pilot project beginning on November 1, 2021, which will involve Niagara and Mist.
Important dates
Starting on November 1, 2021: Authentication on Niagara and Mist with SSH keys will only accept keys that have been uploaded to the CCDB. Keys that are only in .ssh/authorized_keys will no longer work.
Every Monday of November 2021: From 10:00AM to noon Eastern time, authentication on Niagara and Mist will only be possible with SSH keys. Authentication using passwords will be disabled.
Starting on December 1, 2021: Depending on lessons learned, authentication on Niagara and Mist may be restricted to SSH keys only.
What you need to do
To learn about SSH keys, see the drop-in sessions on https://support.scinet.utoronto.ca/education/go.php/586/index.php/ib/1//p_course/586.
If you know how to use SSH keys,
- Create your SSH key pair from your workstation.
- Upload your SSH public key to your CCDB account by connecting to https://ccdb.computecanada.ca/ssh_authorized_keys. After a few minutes, you should be able to authenticate on Niagara or Mist
- If the .ssh folder in your $HOME directory contains a file named authorized_keys, it should be deleted.
- Log out of the cluster and log in again.
Additional documentation on usage and best practices is also available in SSH Keys
Support
If you still have questions or need assistance after reading these documents, please register and join one of the following sessions:
Friday, October 29th, 12:00PM - 01:00PM ET: conducted in French