Manage SSH host keys panel
From version 3.6, the third-party enclosures need to communicate using SSH channel. The SSH fingerprint should validate the communication at every login.
Using Resiliency Platform console, in the Manage SSH host keys panel, you can perform following actions:
Add the SSH host keys
Verify the host keys
Delete the SSH host keys
Note:
To communicate using SSH channel with third-party enclosures you need to enable the "Peer host identify verification" toggle button which is present in Settings >> Miscellaneous card.
To add the SSH host keys
- Login to the technology specific server.
- Execute the below command to get the SHA-256 fingerprint host key:
ssh-keygen -E sha256 -lf ./ssh_host_rsa_key.pub
Make note of the host key and fingerprint.
- Login to Resiliency Platform, navigate to Settings (menu bar) > Infrastructure > Details View > Storage. Select the enclosure tab for which you want to verify the SSH host key by selecting any one of the below options:
For accessing the RecoveryPoint, navigate to Settings > Infrastructure > Data Mover.
Right click and select Edit option from the vertical ellipses.
OR
Right click and select Manage SSH host keys option from the vertical ellipses.
OR
Click on + <enclosure>
- In the Manage SSH host keys panel, paste the SSH host key in the text area provided and click on the Add button.
The newly added SSH host key is added in the table and its SHA-256 fingerprint is auto-generated.
To verify the SSH host keys
- Login to the technology specific server.
- Execute the below command to get the SHA-256 fingerprint host key:
ssh-keygen -E sha256 -lf ./ssh_host_rsa_key.pub
Make note of the SHA-256 fingerprint host key.
- Login to Resiliency Platform, navigate to Settings (menu bar) > Infrastructure > Details View > Storage. Select the enclosure tab for which you want to verify the SSH host key by selecting any one of the below options:
For accessing the RecoveryPoint, navigate to Settings > Infrastructure > Data Mover.
Right click and select Edit option from the vertical ellipses.
OR
Right click and select Manage SSH host keys option from the vertical ellipses.
OR
Click on + <enclosure>
- Verify the host key generated from step 2 with the host key seen in the SHA-256 Fingerprint column.
- Click Next and then click Submit on the Select Enclosure panel.
From the Manage SSH host keys panel, you can delete the SSH host keys added.
To delete the SSH host keys
- Login to Resiliency Platform, navigate to Settings (menu bar) > Infrastructure > Details View > Storage. Select the enclosure tab for which you want to verify the SSH host key by selecting any one of the below options:
For accessing the RecoveryPoint, navigate to Settings > Infrastructure > Data Mover.
Right click and select Edit option from the vertical ellipses.
OR
Right click and select Manage SSH host keys option from the vertical ellipses.
OR
- Click on the X from the Actions column.
Note:
There must be minimum one host key present in the Manage SSH host keys panel.