SSH To Windows Using Public Key
Vložit
- čas přidán 5. 09. 2021
- Install OpenSSH Server on Windows 10, and connect from Linux and Windows using public key authentication.
Also see related videos:
Windows Terminal SSH Public Key Authentication: • Windows Terminal SSH P...
Windows Terminal Install and Configure: • Windows Terminal Insta...
Commands to copy and paste include bracket characters, not allowed in CZcams descriptions.
Download TEXT file of the commands:
www.marspremedia.com/download...
Substitute USER and IP for your user name and server's IP address. - Věda a technologie
I was going nuts forcing the key into C:\Users\USER\.ssh\authorized_keys, like if it were a Linux host, but obviously that didn't work. I followed your steps and it worked like a charm. This kind of videos is all we novice sysadmins need!
what a gymnastics routine to get up and running. Thanks for the clear and concise instructions
Yes it's not a simple process. Was some work just to figure out best way to describe all of that without making it more confusing. Great to hear that effort was successful.
Thanks for the video. I was stuck following other tutorials but this one cleared things in my head and I've now got 2 Windows machines and a Hassio machine interconnected with keys.
Great to hear. I'm glad it helped.
excellent explanation, I saw many manuals and videos and none explain as well as you, I thank you new follower from Venezuela
I'm super thankful for this, you got me using my public/private key instead of passwords to SSH into my windows machine from a linux based device.
I was doing a number of things wrong. I didnt have the right credentials for administrators_authorized_keys or that file in general, and I was using an administrator account and placing keys in the authorized_keys file.
Thank you for the corrections and the help getting the public key in the right file with the right access controls. I super appreciate it!
I'm glad it helped. Thank you for the feedback.
Exactly, I am having same problem, definitely I will try this, thanks
Is it bad to use authorized_keys under the Administrator user's .ssh folder?
This video is better than all the blogs and videos out there, Thumbs Up.
Great content.
Thank you for the kinds words. Good to hear the effort put in the video helps others.
Thanks William! It was exactly what I needed after an hour of fumbling around trying to set it up myself 😅
Awesome! I'm glad it helped. Any other topics, leave a comment. I'm always looking for ideas for new videos. Thanks!
Excellent video. Would have taken me forever to figure that out on my own.
This is the first guide that I've been able to follow and actually get it to work! Thanks a ton
Good to hear. Thanks for watching.
bro youre a f****** champ!!! do you know how long ive been sitting here trying to figure this out from god awfully confusing videos doing 20 things at once. THANK YOU!!!!!!! this is perfect and worked for me SO EASILY AS IT SHOULD BE where as 4 other videos have failed. THANKS!!!!
Thanks. Glad it helps.
Man. Thank you so much. I don't understand why official documents does not provide such details. Good work keep up
Thank you! That inspires me to make more similar content. Any suggestions for topics I should cover?
Thank you, followed this exactly and worked first try!
Thank you. The explanation and demonstration were super helpful.
Thank you! Every other guide I saw left out setting permissions on the authorized keys file. That was the one thing I was missing.
Great to hear. Thanks for watching.
Wow, thank you so much! This was the only Video that could solve my problem, that neither any other video nor me in many hours could solve. Even if, in my case the only problem might have been, that I didn't know about having to uncomment the options in the config file xD. Either way, thank you.
The ONLY video that gave me a solution. Thanks
Great stuff, I absolutely loved it - and it worked!
Thanks William , very clear and right what I was loking for, :)
Great! Glad I could help.
Hello,
Thank you very much, i have been struggling with this and you helped alot.
I however just need to say to those who fails the part with :
icacls administrators_authorized_keys /inheritance:r /grant "Administrators:F" /grant "SYSTEM:F"
If your system is running in a language other than english, Administrators should be written in the system language, otherwise it will never work
Yes I encountered this with a German user. The value here is whatever name your system uses for the Administrators group. This can be determined by opening Computer Management (a number of ways, for example, right-click Start menu and select in fly-out menu), then in section "Local Users and Groups", look inside the "Groups" section. In English systems it is second item "Administrators". Look here for your variation. Use that in the command.
You talk so seriously, making me feel like if I made a single mistake I would delete my whole system or something 😅. In any case, thank you so much William, your a lifesaver.
Good to hear it works for you. Thanks for watching.
THE ONLY VIDEO THAT SOLVED MY PROBLEM!!!
Thanks. I really appreciate your work.
Thank you very much Sir. Crystal clear as water and working at the first try.
Muchas gracias!!!
Great! Thank you!
This is the BEST video, others is just shxt, not even reocrd in two seperate windows, how the f__k do i know which is server which is local lol. Thanks William!
Thank you so much for the detailed instructions.
You're welcome. I'm glad to help.
Thanks a lot. Very informative and the steps are very clear, and it works 👍
You are welcome, and thanks for the + on clarity. I am glad it helps.
Thanks man. Great help
Thank you so much ! Exactly what I needed.
Glad it helped.
Wow, that was awesome, guys don't forget to check the description, and download all commands from there
Nice. Thanks.
Thank you, it worked.👍
Thanks mate! Very helpul.
Nice job, very clear and helpful
Thanks. Glad you like like it.
Fantastic thank you!!!🎉
You saved my day!! Really really appreciate it!!!!!
And I found this method might only work with rsa key instead of dsa key
Great. I'm glad it helped.
Excelent video, thank you William!
You're welcome. Thanks for watching.
Thank you for the sharing..!❤
This was perfect! Thank you!
Glad it helps. Thanks for watching.
Thanks so much! So thankful
most valuable one across many
Thanks
THANK YOU SIR.
súper, me ayudo bastante bro, gracias 🙏🏼
Thanks.
this was so so so helpful thanks a million
You're welcome. Thanks for watching.
Hello - if you wanted to connect via ssh over the internet to your home windows 10 computer running openssh server, which more steps need to be taken? I guess you need to open the firewall of the remote computer for incoming traffic etc?
It is possible. You would have to open port 22 on your router, and forward it to your Windows machine, which would also have to allow connections on the port. HOWEVER, I would strongly recommend using a different port number. Everyone (every hacker) knows what port 22 is for. Set your router and your Windows SSH server to something in the range 12000-14000 (usually safe to use). Just pick at random, say 12533 (for example; pick your own). Only you know that is the correct port. It's safer that way. Chances of someone guessing your obscure port number are low.
Still a rusty but good explanation I will understand better with time. Thanks Sir
Thanks
When i ssh from windows machine it did not generate id_ras_pub file but instead generated known_hosts file in .ssh folder.. what to do now
Run keygen to make id_rsa and pub. Watch video again. Pay close attention at 4:30 to 5:10
I tired the set-up with Windows Server 2019. Password based SSH is working fine, but when I am trying with key based , it always throwing error saying permission denied on my WSL ubuntu on my windows laptop. When I tried with putty it is saying server refused key. any clue ?
Not sure. I have only tried this on Windows 10 but I don't see why it would be different on Server. See if you can find any logs. Should be in "%programdata%\ssh\logs\" Look for auth.log. Maybe in Event log security also. Either might have a more specific reason authentication fails.
thanks this is key to solve Permission denied (publickey,gssapi-with-mic,keyboard-interactive).
Great. I'm glad it helps.
Thanks for this video - do you have a corresponding one in which you are signing SSHing into the Ubuntu system from a Windows system?
I do not.
William why did they need to make it this confusing to get SSH keys working ? Its not intuitive at all especially when we need to do the inheritance stuff. Is there a reason that they need to make things this illogical and complicated for something like an SSH connection between two pcs in this day and age?
Worked perfectly!!
Great. I'm glad it helped.
Hi Wiliam, I followed your step but somehow, it's not working. is it bcoz I am trying to connect Windows server from a WSL linux which is created on same windows server?
I don't know. I don't use WSL so I'm not sure, but there shouldn't be any reason it wouldn't work the same it does with an actual server or virtual machine. As for the problem, please be more specific. "It's not working" is vague. What isn't working?
If I am trying to open sshd_config, "You don't have permission to open the file, contact file owner or an administrator to obtain permission", can you please help on this!!!
Just like it says. You need admin permissions. I mentioned this at the start. Log in as Administrator or add your user account to the Administrators group. Windows 10 right-click Start menu, Computer Management. In Section Local Users and Groups, find the user account, right-click properties, Member of tab, add the Administrators group.
Thank you sooooo much!
Glad to help.
I'm able to add key and clone using my account, but fails when I try running thru windows service, getting host key authentication failed. please do advice
It is difficult for me to help knowing so little about your configuration. My first advice would be to ensure your account is an Administrator. And be sure to follow the steps explained in the video about how that is a different file to edit than regular users (I can't imagine giving non-admin users SSH access, so I didn't bother to include that). I'm not sure what you mean by "clone" in your comment. Perhaps back up your current key (if you have an existing one you're trying to preserve) then do ALL steps in the video, including generating a fresh key file. Beyond that I don't know how much more I can help without being there.
Thanks you
perfect, thx!!!
Glad it helped!
I can't thank you enough!
You are welcome. Glad it helps.
In my case, ssh did not accept the private key because the file did not have the proper permissions as shown in the video, and the warning appears (use the -v parameter) "WARNING: UNPROTECTED PRIVATE KEY FILE!". Leave permission only for your user, administrators and the system. Good luck!
Do I need to have debian to get an ssh public key? I have followed the whole process but using windows10 command prompt and I got lost half way. Please advice.
A Debian host isn't required, but to test you need something else besides the Windows host, from which to connect to the Windows host. For that I used a Debian virtual machine as the other computer. It could be another physical computer or laptop, whatever is on the same network. Public/private keys can be generated in Windows or any flavor of Linux.
I had the same problem. I started the video thinking the instructions were for two different platforms, and I was just following the Windows instructions. Would be helpful if this was done with two windows laptops.
HI @William Campbell , First of all Thank you very much for the video .I have two linux source servers from where i want to connect to the windows server. In the video you have taken the id_rsa.pub file from one linux server and put that in programdata/ssh .but in my case since i have two servers how can i have both the public keys in my windows server. Please help me.
Copy the same .pub file to both servers.
some videos comment out the match group administrators and administrators_authorized_keys, when we need this and when we not? and possible to have pubkey authentication + password together? ( same concept as MFA)
I don't what it means to comment out match group administrators, etc. Are you referring to lines in the sshd_config file? Regardless, if another suggest commenting something to disable it, OK maybe that's a good suggestion. I have no idea. I can only relay what I have found to work, which is the content of the video. I'm sure there's plenty more to it that I don't know. About using a password, keep the line "PasswordAuthentication" set to "yes".
you are a godsend i could ssh into linux public key fine but not windows...of course its windows
Great. I'm glad it helps.
Hello, when you say 3:48 enter the password. What password are you referring to?
the password for the user at the server you want to access
I LOVE You!!!
Thanks.
How to make the vagrant user ssh to Ubuntu vm on a windows lap.
Vagrant is blocked by public key authentication permission
I have no idea what a "vagrant" user is, other than by its definition, a person without a home. Not sure what that means in relation to a computer systems user account.
I came across an automation tool called Vagrant for managing multiple Virtual machines
thank you for the meaning 😆
@@srinath8626 OK. I am not familiar with the product so I can't answer your question. I don't know an answer any better than you do. You need to pick the brain of someone familiar with the VM hosting product.
How can i ssh to ubuntu from windows after generating key pair in windows computer ? Could you please answer?
This video is the other way around -- czcams.com/video/ORks4JXxJp0/video.html If you have already made a key pair in Windows, skip the part about running keygen. Do all the rest as the video describes, just not keygen, or it will replace your current key, which then breaks any other SSH you had previously set up. All the rest is OK, just don't run keygen again. Unless you want to start clean with a fresh key. Then follow the video instructions for that part too.
Hi @@wc7 Thanks for the reply.
life saver
what about for standard users? I generated a keypair from a linux machine and it is still prompting for a password. Can someone please help me? There isn't a single video / thread on this issue apparently.
Giving regular users SSH access is not recommended, likely why there are no videos showing how to do it. This does not mean access is limited to the user "Administrator" or "root". Other users may be given access. They just have to be members of the Administrators Group.
@@wc7 So only admins can be ssh’d into on windows?
@@thenewone3944 Any user can be given SSH access. But that level of access SHOULD only be given to admin users.
@@wc7 I can’t figure out why it’s not working for me. It’s so much easier with linux. I’ve got the pub copied into the users authorized_keys, Modified sshd_config, checked permissions.
Hello, I am struggling to set up ssh on my VM Windows 10 and Host windows 11. Could you please help me? Please let me know if there is another way to contact you.
Follow the steps in the video and it should work. Unless you're not an admin user. I wouldn't recommend that anyway. To reach me by email, start at my website contact page: www.marspremedia.com/contact/
@@wc7 thanks for your response. The problem happens to be I logged in to my computer with my Microsoft account. It worked when I logged in locally
@@yonite4355 Great. I'm glad to hear it worked out. Thank you for responding. It may help others users who have the same problem.
Amazing!. thanks for this. Why windows documentation Sucks. they spend so much time, but we always have to look somewhere else.
I'm glad it helps. Thanks for watching.
sir im still kinda new and just start learning using linux. i wanna ask in min 03:50 the password i need to input is my linux user password or the windows user password that i will SSH into ?
User name and password for Windows user account on the server.
@@wc7 i see, thank you so much for the info and fast reply. you got a new subscriber :D
@@zxcvbqwerty2091 Awesome. Thanks for watching.
but there is no "Open SSH Server" on my windows, I am looking for it there where you do. Please help
What version of Windows? Also, be sure when searching use OpenSSH one word, not Open SSH two words. That won't match. That's why I suggest simply search for SSH and that usually finds it.
@@wc7 Windows 10 pro 1703, I tried to look for OpenSSH still nothing. Thank you very much for response
@@ylyaskudratullayev Your version of Windows is out of date. OpenSSH Server wasn't added until the October 2018 version 1809. You have Fall 2017 version. Run Windows Update.
@@wc7 Thank you very much!
Hi i did put the user password of the Windows Client but it still gives permission denied. Did I do something wrong?
There must be a user account with the same credentials on the Windows server hosting SSH server.
@@wc7 So the User needs to have an Microsoft account?
@@dwd_0105 No. Just a regular user account, like any Windows machine. What is used to log in to Windows. The server may have other credentials, perhaps "Administrator" but for a regular user to get access to the server, they need a user account on the server. It doesn't have to be, but usually it's the same credentials as the user logs in to their own Windows box. That's how I do it when adding users to give them access to a server.
Which password I have to enter when authentication is done? Please give me answer as soon as possible
There is no password. The public/private key pair acts as the password. That's the point. But if you set a passphrase during key generation, you are prompted to enter that, similar to a password. Only you know that passphrase, if one was set.
installed feature and add feature window list is empty
If there are no currently installed optional features, I would question if your Windows install is valid. There are usually at least a few items already installed. If typing "ssh" in the search input does not show "OpenSSH Server" then again I suspect something is wrong with the installation of Windows. Are you connected to the Internet? Are all latest updates installed? What version of Windows?
Thank u
You're welcome. Thanks for watching.
genius man !
Thank you! Is there any other subject I should make a video? All suggestions are welcome.
@@wc7 welcome, can I copy Linux public key and copy in the windows
@@vetriforward6819 Yes, that is possible. It does work. But the typical use is to have each client have its own private key, different from others. At least, that seems to be the recommended method. But I have done what you describe, and it does will work.
Could some one help im getting permission denied issue 😔 while entering password
Either the user doesn't exist on the host server, or the user has a different password. Also ensure the user on the host server is an administrator (user is in the Administrator group).
How to install OpenSSH Server and make it start automatically with windows 10: 0:40
I have followed this video and many others I am not sure why I keep getting Permission denied
Hard to say why from a distance. My first guess is the user trying to log in isn't an Administrator.
I have the same requirement to do ssh from linux to windows but with non admin user account. Can you please tell me how to do this. Admin account ssh is working fine as i tried that with your video.thanks in advance
bastante bien
where do we get the password(3/50 minutе) from?
It's the password for the Windows user name you enter on the command line. If doing this like the video, on your local Windows machine, it's your regular Windows account user name, and the same password you use to log in to Windows. If the Windows box you're trying to contact is another machine, it's the user name password on that box. To SSH to Windows, the server needs an account defined that you use to log in with. The user name and password on the command line is that account's user name and password.
I have problem with password...I all installed like should but problem is password..On windows i dont have any password and i dont know what password is on ssh server...Is there a way to change that password that i can do all other steps or change it.Thank you
Windows password is your Windows user password. Password on SSH server password for that user on the SSH server. Could be the same, that's up to you how you set up your network. Mine I make the same for Windows file sharing to work without having to put in a password every time.
@@wc7 that is problem because i didnt put any password
Is there a reason you didn't include using the ssh-agent service and ssh-add to securely store the private key? This would have allowed removing the server's private key for storage else where. I don't care to have private keys lying about...
I choose not to make hour long videos, and can only fit so much. The topics I choose to cover are driven by viewer demand. If enough ask for the additional you describe, perhaps I'll make a video about that also. Thanks for watching.
I understand; perhaps you could include such references in the notes section.
Good :) 8) ❤❤😎
Thanks. I'm glad you like it. Suggestions for other topics are always welcome.
which password need to enter....??
Use credentials for a user on the target server. If you don't yet have a user on the target server, add an account with password on the target server. Use those credentials.
Wonderful.... How for windows and windows?
Works the same. Just substitute the Debian console with a Windows Terminal console.
@@wc7 Thank you. Can you make a Contabo VDS and SSH video?
@@cizgifilmkolikcizgifilm1963 I can only make videos about topics I know.
icacls saved me
Great! Good to hear it.
Thank you William for this video, for along time I have tried to use public key authentication in Windows 10, I have followed Microsoft documentation but nothing have worked until I have found your video above and everything have worked for me. Thank you for your detailed tutorial. Do you have courses in Udfemy?
No I don't have any courses. Most of my tutorials are for Adobe Scripting using JavaScript. I don't do a lot of system admin videos. Just once in a while for things I had to figure out how to do myself, so I thought to share.
where is the password ?
The Windows user account password.
@@wc7 does not work here either... the windows user account password is just not accepted
@@jamilsonjunior284 Does the user have an account on the server? There must be a user account with admin permissions on the server hosting SSH server that matches the credentials trying to log in.
Pass bot working
OK
so much bla bla bla I need command line
Command line begins around 3:40 after the server is installed.