BwUniCluster 2.0 User Access/SSH Keys - Revision history

M Janczyk: Redirected page to Registration/SSH

2022-03-18T14:36:25Z

R Barthel: add pic to better navigate to my ssh pubkeys

2021-10-08T23:32:38Z

add pic to better navigate to my ssh pubkeys

← Older revision		Revision as of 01:32, 9 October 2021
Line 47:		Line 47:
	1. Log into [https://bwidm.scc.kit.edu https://bwidm.scc.kit.edu].		1. Log into [https://bwidm.scc.kit.edu https://bwidm.scc.kit.edu].

	2. Click on '''My SSH Pubkeys''' or '''Meine SSH Pubkeys''' in ~~the~~ ~~main~~ ~~menu~~.		2. Click on '''My SSH Pubkeys''' or '''Meine SSH Pubkeys''' under '''index''' or '''Übersicht'''.

			[[File:Bwregapp_index_after_login.png\|650px\|border\|center]]

	3. Click on the '''Add SSH Key''' or '''SSH Key hochladen''' button.		3. Click on the '''Add SSH Key''' or '''SSH Key hochladen''' button.
Line 124:		Line 126:
	= Revoke/Delete an SSH Key=		= Revoke/Delete an SSH Key=

	1. Log into [https://bwidm.scc.kit.edu https://bwidm.scc.kit.edu].		# Log into [https://bwidm.scc.kit.edu https://bwidm.scc.kit.edu].
			# Navigate to '''index''' or '''Übersicht'''

	2. Click on '''My SSH Pubkeys''' or '''Meine SSH Pubkeys''' in the main menu.		# Click on '''My SSH Pubkeys''' or '''Meine SSH Pubkeys''' in the main menu.
		⚫	# Click on the '''Revoke''' or '''Zurückziehen''' button next to the SSH Key you want to revoke.

⚫	3. Click on the '''Revoke''' or '''Zurückziehen''' button next to the SSH Key you want to revoke.

	'''Please note that revoked keys are blocked and cannot be used again.'''		'''Please note that revoked keys are blocked and cannot be used again.'''

S Raffeiner: /* Registering a Command Key */

2021-02-02T08:51:42Z

Registering a Command Key

← Older revision		Revision as of 10:51, 2 February 2021
Line 106:		Line 106:

	The process for registering a Command Key is the same as the one for an Interactive Key, but after selecting '''Command''' under '''Type of usage''' two additional field labelled '''Command''' and '''From (network address)''' appear which have to be filled in. Please also provide a comment to speed up the approval process.		The process for registering a Command Key is the same as the one for an Interactive Key, but after selecting '''Command''' under '''Type of usage''' two additional field labelled '''Command''' and '''From (network address)''' appear which have to be filled in. Please also provide a comment to speed up the approval process.

			If you want to register a command key to be able to transfer data automatically, please use the following string as the '''Command''':

			<pre>
			/usr/bin/rrsync -ro / -rw /
			</pre>

	After the key has been added, it will be marked as '''Pending''':		After the key has been added, it will be marked as '''Pending''':

S Raffeiner at 08:48, 2 February 2021

2021-02-02T08:48:08Z

← Older revision		Revision as of 10:48, 2 February 2021
Line 106:		Line 106:

	The process for registering a Command Key is the same as the one for an Interactive Key, but after selecting '''Command''' under '''Type of usage''' two additional field labelled '''Command''' and '''From (network address)''' appear which have to be filled in. Please also provide a comment to speed up the approval process.		The process for registering a Command Key is the same as the one for an Interactive Key, but after selecting '''Command''' under '''Type of usage''' two additional field labelled '''Command''' and '''From (network address)''' appear which have to be filled in. Please also provide a comment to speed up the approval process.

	[[File:Bwunicluster 2.0 access ssh keys service add command.png\|center]]

	After the key has been added, it will be marked as '''Pending''':		After the key has been added, it will be marked as '''Pending''':

	[[File:Bwunicluster 2.0 access ssh keys service add command.png\|center]		[[File:Bwunicluster 2.0 access ssh keys service add command.png\|center]]

	You will receive an e-mail as soon as the key has been approved and can be used.		You will receive an e-mail as soon as the key has been approved and can be used.

S Raffeiner: /* Registering an Interactive Key */

2020-09-18T07:48:00Z

Registering an Interactive Key

← Older revision		Revision as of 09:48, 18 September 2020
Line 71:		Line 71:
	= Registering an Interactive Key =		= Registering an Interactive Key =

	'''Interactive Keys''' can be used to log into a system for normal interactive use. They are not valid all the time, but only for one hour after the last 2-factor login. This means that on the first attempt to log into the bwUniCluster 2.0 system your SSH key will not be accepted, but you have to log in with an One-Time Password (OTP) and your service password. After that you won't have to enter the OTP and service password anymore for one hour because your SSH Key has been unlocked. After the hour has passed, you have to enter the OTP and service password again on your next login, and then your SSH Key will be unlocked for another hour.		'''Interactive Keys''' can be used to log into a system for normal interactive use. They are not valid all the time, but only for one hour after the last 2-factor login. This means that on the first attempt to log into the bwUniCluster 2.0 system your SSH key will not be accepted, but you have to log in with an One-Time Password (OTP) and your service password. After that you won't have to enter the OTP and service password anymore for one hour because your SSH Key has been unlocked. After the hour has passed, you have to enter the OTP and service password again on your next login attempt, and then your SSH Key will be unlocked for another hour.

	Perform the following steps to register an interactive key:		Perform the following steps to register an interactive key:

S Raffeiner: /* Registering an Interactive Key */

2020-09-18T07:47:35Z

Registering an Interactive Key

← Older revision		Revision as of 09:47, 18 September 2020
Line 71:		Line 71:
	= Registering an Interactive Key =		= Registering an Interactive Key =

	'''Interactive Keys''' can be used to log into a system for normal interactive use. They are not valid all the time, but only for one hour after the last 2-factor login. This means that on the first attempt to log into the bwUniCluster 2.0 system your SSH key will not be accepted, but you have to log in with an One-Time Password (OTP) and your service password. After that you won't have to enter the OTP and service password anymore for on hour because your SSH Key has been unlocked. After the hour has passed, you have to enter the OTP and service password again on your next login, and then your SSH Key will be unlocked for another hour.		'''Interactive Keys''' can be used to log into a system for normal interactive use. They are not valid all the time, but only for one hour after the last 2-factor login. This means that on the first attempt to log into the bwUniCluster 2.0 system your SSH key will not be accepted, but you have to log in with an One-Time Password (OTP) and your service password. After that you won't have to enter the OTP and service password anymore for one hour because your SSH Key has been unlocked. After the hour has passed, you have to enter the OTP and service password again on your next login, and then your SSH Key will be unlocked for another hour.

	Perform the following steps to register an interactive key:		Perform the following steps to register an interactive key:

S Raffeiner: /* Registering an Interactive Key */

2020-09-18T07:47:00Z

Registering an Interactive Key

← Older revision		Revision as of 09:47, 18 September 2020
Line 71:		Line 71:
	= Registering an Interactive Key =		= Registering an Interactive Key =

	'''Interactive Keys''' can be used to log into a system for normal interactive use. They are not valid all the time, but only for one hour after the last ~~[[bwUniCluster 2.0 User Access/2FA Tokens\|~~2-factor login]]. This means that on the first attempt to log into the bwUniCluster 2.0 system your SSH key will not be accepted, but you have to log in with an One-Time Password (OTP) and your service password. After that you won't have to enter the OTP and service password anymore for on hour because your SSH Key has been unlocked. After an hour has passed, you have to enter the OTP and service password on your next login ~~again~~, and your SSH Key will be unlocked for ~~one~~ hour ~~again.~~		'''Interactive Keys''' can be used to log into a system for normal interactive use. They are not valid all the time, but only for one hour after the last 2-factor login. This means that on the first attempt to log into the bwUniCluster 2.0 system your SSH key will not be accepted, but you have to log in with an One-Time Password (OTP) and your service password. After that you won't have to enter the OTP and service password anymore for on hour because your SSH Key has been unlocked. After the hour has passed, you have to enter the OTP and service password again on your next login, and then your SSH Key will be unlocked for another hour.

	Perform the following steps to register an interactive key:		Perform the following steps to register an interactive key:

S Raffeiner at 07:44, 18 September 2020

2020-09-18T07:44:19Z

← Older revision		Revision as of 09:44, 18 September 2020
Line 1:		Line 1:
			<!-- One column table -->
			{\| style="width: 100%; margin:4px 0 0 0; background:none; border-spacing: 0px;"
			\| style="width:100%; border:1px solid #BBBBBB; background:#fff5fa; vertical-align:top; color:#000;" \|
			{\| style="width:100%; vertical-align:top; border:0px solid #BBBBBB; padding:4px;" \|
			\|-
			'''NOTE:''' Interactive SSH Keys are not valid all the time, but only for one hour after the last 2-factor login. They have to be "unlocked" by entering the OTP and service password. Please see the more detailed description in the Section [[BwUniCluster_2.0_User_Access/SSH_Keys#Registering_an_Interactive_Key\|Registering an interactive key]].
			\|}
			\|}

	'''SSH Keys''' are a mechanism for logging into a computer system without having to enter a password. Instead of authenticating yourself with something you know (a password), you prove your identity by showing the server something you have (a cryptographic key).		'''SSH Keys''' are a mechanism for logging into a computer system without having to enter a password. Instead of authenticating yourself with something you know (a password), you prove your identity by showing the server something you have (a cryptographic key).

S Raffeiner: /* Minimum requirements for SSH Keys */

2020-08-20T06:07:31Z

Minimum requirements for SSH Keys

← Older revision		Revision as of 08:07, 20 August 2020
Line 23:		Line 23:
	Algorithms and Key sizes:		Algorithms and Key sizes:

	* ~~3072~~ bits or more for RSA		* 2048 bits or more for RSA
	* 521 bits for ECDSA		* 521 bits for ECDSA
	* 256 Bits (Default) for ED25519		* 256 Bits (Default) for ED25519

S Raffeiner: /* Minimum requirements for SSH Keys */

2020-08-20T06:05:48Z

Minimum requirements for SSH Keys

← Older revision		Revision as of 08:05, 20 August 2020
Line 23:		Line 23:
	Algorithms and Key sizes:		Algorithms and Key sizes:

	* ~~3096~~ bits or more for RSA		* 3072 bits or more for RSA
	* 521 bits for ECDSA		* 521 bits for ECDSA
	* 256 Bits (Default) for ED25519		* 256 Bits (Default) for ED25519