Tag: Secure Shell (SSH)

Secure administration of Linux systems includes avoiding SSH logons by password and instead logging on with RSA keys.

The de facto standard for SSH connections on Windows is PuTTY . Here, logon with RSA keys is implemented, but only key files can be used, which has the disadvantage that they are almost unprotected in the file system.

Surely a great option would be to use RSA keys from the Windows world, and perhaps even stored on a physical or virtual smart card.

Continue reading "Use SSH (PuTTY) on Windows with a certificate / smart card"

If the servers providing the CRL distribution points are located in a demilitarized zone (DMZ), for example, or data transfer via Server Message Block (SMB) is not possible for other reasons, the certificate revocation lists (CRLs) can be transferred to the distribution points using SSH Secure Copy (SCP). As of Windows Server 2019, the OpenSSH server and client packages are available. The following describes the setup with authentication via public keys (Public Key Authentication) instead of passwords as an example

Continue reading "Transfer certificate revocation lists to CRL distribution points using SSH Secure Copy (SCP) with public key authentication (Windows Server 2019)"