Generating SSH keys in Windows

Parent page: SSH

PuTTYgen before generating a key (Click for larger image)

PuTTYgen after generating a key (Click for larger image)

Generating a key pair

The process of generating a key is nearly the same whether you are using PuTTY or MobaXTerm.

• With MobaXTerm, go to the menu item Tools->MobaKeyGen (SSH key generator)
• With PuTTY, run the PuTTYGen executable.

Both of these methods will cause a window to be displayed which can be used to generate a new key or to load an existing key. The PuTTY window is illustrated at right. The MobaXTerm window looks almost exactly the same.

1. For "Type of key to generate" select "Ed25519". (Type "RSA" is also acceptable, but set the "Number of bits" to 2048 or greater.)
2. Click the "Generate" button. You will then be asked to move your mouse around to generate random data to be used to create the key.
3. Enter a passphrase for your key. Remember this passphrase, you will need it every time you reload PuTTY or MobaXTerm to use this key pair.
4. Click "Save private key" and choose a meaningful file name; the extention .ppk is added to the file name. (e.g. compute_canada.ppk).
5. Click "Save public key". It is conventional to save the public key with the same name as the private key, but here, the extension is .pub.

Installing the public part of the key pair

Installing via CCDB

We encourage you to register your SSH public key with the CCDB. This will let you to use it to log in to any Compute Canada HPC cluster. Copy the contents of the box titled "Public key for pasting into OpenSSH ..." and paste it into the box at CCDB -> Manage SSH Keys. For more about this, see SSH Keys: Using CCDB.

Installing locally

If for some reason you do not want to use the CCDB method, you may upload your public key onto each cluster as follows:

1. Copy the contents of the box titled "Public key for pasting into OpenSSH ..." and paste it as a single line at the end of /home/USERNAME/.ssh/authorized_keys on the cluster you wish to connect to.
2. Ensure the permissions and ownership of the ~/.ssh directory and files therein are correct, as described in these instructions.

You may also use ssh-copy-id for this purpose, if it is available on your personal computer.

Connecting using a key pair

Test the new key by connecting to the server using SSH. See connecting with PuTTY using a key pair; connecting with MobaXTerm using a key pair; or connecting with WinSCP.

Key generation and usage with PuTTY is demonstrated in this video : Easily setup PuTTY SSH keys for passwordless logins using Pageant.

Converting an OpenStack key

When a key is created on OpenStack you obtain a key with a ".pem" extension. This key can be converted to a format used by PuTTY by clicking the "Load" button in PuTTYGen. Then select the "All Files (*.*)" filter, select the ".pem" file you downloaded from OpenStack, and click "Open". You should also add a "Key passphrase" at this point to use when accessing your private key and then click "Save private key".

This private key can be used with PuTTY to connect to a VM created with OpenStack. For more about this, see "Launching a VM" on the Cloud Quick Start page.

Compute Canada Data Base