notes-infineon/_-Review/ssh.md

type, created, updated

type	created	updated
topic	2024-01-14T02:18:17.942Z	2024-01-14T03:32:28.219Z

SSH

%WINDIR%\System32\OpenSSH
%ProgramData%\ssh
%USERPROFILE%\.ssh

sudo -i
exit
ssh-import-id gh:mikepharesjr

Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'
# Install the OpenSSH Client
Add-WindowsCapability -Online -Name OpenSSH.Client~~~~0.0.1.0
# Install the OpenSSH Server
Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0

dism /Online /Add-Capability /CapabilityName:OpenSSH.Server~~~~0.0.1.0

New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH SSH Server' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -Program "C:\Windows\System32\OpenSSH\sshd.exe"

ssh-keygen -t ed25519

puttygen "C:\Users\mikep\.ssh\id_ed25519"

copy $env:USERPROFILE\.ssh\id_ed25519.pub C:\ProgramData\ssh\authorized_keys
copy $env:USERPROFILE\.ssh\id_ed25519.pub C:\ProgramData\ssh\administrators_authorized_keys
icacls.exe "C:\ProgramData\ssh\authorized_keys" /inheritance:r /grant "Administrators:F" /grant "SYSTEM:F"
icacls.exe "C:\ProgramData\ssh\administrators_authorized_keys" /inheritance:r /grant "Administrators:F" /grant "SYSTEM:F"
code-insiders "C:\ProgramData\ssh"

Start-Service sshd

# After default
PubkeyAuthentication yes
PasswordAuthentication no

certlm.msc