Technical Notes |
|
This technical note describes how to configure public key authentication with an empty passphrase. Once you have configured authentication that does not require user input, you can then automate file transfers using F-Secure SSH.
If you need authentication that does not require user input (so that SSH, SCP or SFTP won't stop to ask for a password or passphrase), there are a couple options:
Note: This note describes how to configure public key authentication with empty passphrases. Host-based authentication is a bit more difficult. Please refer to your SSH Server manual to configure host-based authentication.
This option is the easier of the two. Simply establish public key authentication with an empty passphrase. (When you are creating keys and the key generator prompts you for a passphrase, just press Enter.)
Of course, before setting up an empty passphrase, you must have the knowledge to establish public key authentication.
Is this safe? Yes, it is. It is safe as long as your keyfiles for public key authentication don't get into the wrong hands. That said, it's up to you to consider if this is safe enough for your environment. If you are unsure, please refer to the technical design of SSH.
The following steps describe, in more detail, how to configure public key authentication with an empty passphrase. The steps below assume that you are using the F-Secure SSH windows client to connect to a UNIX server:
To test your public key authentication, disconnect and change "public key authentication" to be only "authentication" in the authentication methods list.
Did you connect to your server without entering a passphrase? If not, check your configuration.