122 lines
4.5 KiB
Markdown
122 lines
4.5 KiB
Markdown
---
|
|
created: 2024-01-14T02:18:17.942Z
|
|
type: topic
|
|
updated: 2024-08-23T21:14:54.201Z
|
|
---
|
|
|
|
# SSH
|
|
|
|
```bash
|
|
%WINDIR%\System32\OpenSSH
|
|
%ProgramData%\ssh
|
|
%USERPROFILE%\.ssh
|
|
```
|
|
|
|
```bash https://api.github.com/users/mikepharesjr/keys
|
|
sudo -i
|
|
exit
|
|
ssh-import-id gh:mikepharesjr
|
|
```
|
|
|
|
```PowerShell Administrator
|
|
Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'
|
|
# Install the OpenSSH Client
|
|
Add-WindowsCapability -Online -Name OpenSSH.Client~~~~0.0.1.0
|
|
# Install the OpenSSH Server
|
|
Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0
|
|
```
|
|
|
|
```bash
|
|
dism /Online /Add-Capability /CapabilityName:OpenSSH.Server~~~~0.0.1.0
|
|
```
|
|
|
|
```PowerShell Administrator
|
|
New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH SSH Server' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -Program "C:\Windows\System32\OpenSSH\sshd.exe"
|
|
```
|
|
|
|
```PowerShell
|
|
ssh-keygen -t ed25519
|
|
```
|
|
|
|
```bash
|
|
puttygen "C:\Users\mikep\.ssh\id_ed25519"
|
|
```
|
|
|
|
```PowerShell Administrator
|
|
copy $env:USERPROFILE\.ssh\id_ed25519.pub C:\ProgramData\ssh\authorized_keys
|
|
copy $env:USERPROFILE\.ssh\id_ed25519.pub C:\ProgramData\ssh\administrators_authorized_keys
|
|
icacls.exe "C:\ProgramData\ssh\authorized_keys" /inheritance:r /grant "Administrators:F" /grant "SYSTEM:F"
|
|
icacls.exe "C:\ProgramData\ssh\administrators_authorized_keys" /inheritance:r /grant "Administrators:F" /grant "SYSTEM:F"
|
|
code-insiders "C:\ProgramData\ssh"
|
|
```
|
|
|
|
```PowerShell Administrator
|
|
Start-Service sshd
|
|
```
|
|
|
|
```conf
|
|
# After default
|
|
PubkeyAuthentication yes
|
|
PasswordAuthentication no
|
|
```
|
|
|
|
```bash
|
|
certlm.msc
|
|
```
|
|
|
|
```bash
|
|
systemctl restart ssh
|
|
```
|
|
|
|
```bash
|
|
echo "admin@192.168.11.1"&ssh admin@192.168.11.1
|
|
echo "asus@asus.laptops"&ssh asus@asus.laptop -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "metrologysvc@meslvec0004.mes.infineon.com"&ssh metrologysvc@meslvec0004.mes.infineon.com -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "metrologysvc@meslvec0005.mes.infineon.com"&ssh metrologysvc@meslvec0005.mes.infineon.com
|
|
echo "mike@192.168.0.41"&ssh mike@192.168.0.41 -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "mike@server"&ssh mike@192.168.11.2 -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "mikep@192.168.11.16"&ssh mikep@192.168.11.16 -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "phares@auclv0558.auc.infineon.com"&ssh phares@auclv0558.auc.infineon.com
|
|
echo "phares@leolsec0004.leo.infineon.com"&ssh phares@leolsec0004.leo.infineon.com -i C:/Users/phares/.ssh/id_ed25519_leo
|
|
echo "phares@mesxs015.mes.infineon.com"&ssh phares@mesxs015.mes.infineon.com
|
|
echo "pi3@192.168.11.17"&ssh pi3@192.168.11.17 -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "root@192.168.11.17"&ssh root@192.168.11.17 -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "root@192.168.5.1"&ssh 192.168.5.1
|
|
echo "root@asus.laptop"&ssh root@asus.laptop -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "root@chelsea.desktop"&ssh root@chelsea.desktop -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "root@free.file.sync.root"&ssh root@free.file.sync.root -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "tibco@leolsec0003.leo.infineon.com"&ssh tibco@leolsec0003.leo.infineon.com -i C:/Users/phares/.ssh/id_ed25519_leo
|
|
echo "tibco@leolsec0004.leo.infineon.com"&ssh tibco@leolsec0004.leo.infineon.com -i C:/Users/phares/.ssh/id_ed25519_leo
|
|
echo "tibco@leolsec0005.leo.infineon.com"&ssh tibco@leolsec0005.leo.infineon.com -i C:/Users/phares/.ssh/id_ed25519_leo
|
|
echo "tibco@mesxsec013.mes.infineon.com"&ssh tibco@mesxsec013.mes.infineon.com
|
|
echo "tibco@mesxsec014.mes.infineon.com"&ssh tibco@mesxsec014.mes.infineon.com
|
|
echo "tibco@tibrvd.mes.infineon.com"&ssh tibco@tibrvd.mes.infineon.com
|
|
echo "unity4@unity4"&ssh unity4@unity4 -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "unity5@unity5"&ssh unity5@unity5 -i C:/Users/phares/.ssh/id_ed25519
|
|
echo "winSCP%20temporary%20session"&ssh 192.168.0.54 -i C:/Users/phares/.ssh/id_ed25519
|
|
```
|
|
|
|
```bash
|
|
ssh root@free.file.sync.root -i C:/Users/phares/.ssh/id_ed25519
|
|
```
|
|
|
|
- [windows-ssh-permissions-for-private-key-are-too-open](https://superuser.com/questions/1296024/windows-ssh-permissions-for-private-key-are-too-open)
|
|
|
|
```bash Fri Aug 23 2024 11:05:00 GMT-0700 (Mountain Standard Time)
|
|
# Set Key File Variable:
|
|
Set Key="%UserProfile%\.ssh\id_rsa"
|
|
# Remove Inheritance:
|
|
Icacls %Key% /c /t /Inheritance:d
|
|
# Set Ownership to Owner: Key's within %UserProfile%:
|
|
Icacls %Key% /c /t /Grant %UserName%:F
|
|
# Key's outside of %UserProfile%:
|
|
TakeOwn /F %Key%
|
|
Icacls %Key% /c /t /Grant :r %UserName%:F
|
|
# Remove All Users, except for Owner:
|
|
Icacls %Key% /c /t /Remove:g "Authenticated Users" BUILTIN\Administrators BUILTIN Everyone System Users
|
|
# Verify:
|
|
Icacls %Key%
|
|
# Remove Variable:
|
|
set "Key="
|
|
```
|