1.Creating SSH Keys

Creating SSH Keys for Use with Oracle Cloud Services

Generating an SSH Key Pair Using PuTTY Key Generator

To generate an SSH key pair using the PuTTY Key Generator,

1. Find puttygen.exe in the PuTTY folder on your computer, for example, C:\Program Files (x86)\PuTTY. Double-click puttygen.exe to open it.

1. Description of this image
   1. Accept the default key type, SSH-2 RSA.
   2. SSH-2 is the most recent version of the SSH protocol (and is incompatible with SSH-1). RSA and DSA are algorithms for computing digital signatures.

1. Description of this image
   1. Set the Number of bits in a generated key to 2048 bits, if it is not already set with that value.
   2. This sets the size of your key and thus the security level. A minimum of 2048 bits is recommended for SSH-2 RSA.

1. Description of this image
   1. Click Generate.

1. Description of this image
   1. Move your mouse around the blank area to generate randomness to the key.
   2. Note: the dotted red line in the image below is for illustration purposes only. It does not appear in the generator pane as you move the mouse.

1. Description of this image
   1. The generated key appears under Public key for pasting into OpenSSH authorized_keys file.

1. Description of this image
   1. While a passphrase is not required, you should specify one as a security measure to protect the private key from unauthorized use.
   2. There is no way to recover a passphrase if you forget it.
   3. Save the private key of the key pair. Depending how you work with the private key in the future, you may need one saved in the PuTTY PPK format and one saved in OpenSSH format. Let's do both.

1. To save the key in the PuTTY PPK format, click Save private key to save the private key of the key pair.

1. Description of this image
   1. You can name it anything you want, although you may want to use the same name as you used for the key comment. The private key is saved in PuTTY's Private Key (PPK) format, which is a proprietary format that works only with the PuTTY toolset.

1. Description of this image
   1. You can use this key whenever you use Putty to perform SSH actions.
2. To save the key in OpenSSH format, open the Conversions menu and select Export SSH key. This will be the same key as above, just saved in a different format.

1. Description of this image
   1. You can name it anything you want, but to keep track of your keys, you should give it the same name as the key you saved in PPK format in the previous step. You can also use any extension (or no extension), but let's use .ssh, to make it clear what format it is.

1. Description of this image
   1. You can use this key whenever you use OpenSSH to perform SSH actions using ssh utitlities that support OpenSSH, for example when using Linux in a command shell.

1. Now you need to create the public key to be paired with the private key(s) you just created. However, clicking the Save public key button will create a public key that won't work with Oracle Cloud services in certain cases. So, for the purposes of this tutorial, there is no reason to save a public key using the Save public key button.

1. Description of this image
   1. Instead, proceed as follows.
   2. In the PuTTY Key Generator, select all of the characters under Public key for pasting into OpenSSH authorized_keys file.
   3. Make sure you select all the characters, not just the ones you can see in the narrow window. If a scroll bar is next to the characters, you aren't seeing all the characters.

1. Description of this image
   1. Right click somewhere in the selected text and select Copy from the menu.

1. Description of this image
   1. Open a text editor and paste the characters, just as you copied them. Start at the first character in the text editor, and do not insert any line breaks.

1. Description of this image
   1. Save the key as a text file, using the same root name as you used for the private key. Add a .pub extension. You can give it any extension you want, but .pubis a useful convention to indicate that this is a public key.

1. Description of this image
   1. Write down the names of your public and private keys, and note where they are saved. You will need the public key when creating service instances in, for example, Oracle Java Cloud Service and Oracle Database Cloud - Database as a Service. You will need the private key when trying to access a service instance's virtual machine via SSH.

To create an SSH key pair on the command line using ssh-keygen:

1. Open a shell for entering the commands.
2. At the prompt, enter the following:
1. ssh-keygen -t rsa -N "" -b "2048" -C "key comment" -f path/root_name
   1. where the arguments are as follows:

1. For example,

1. Description of this image
   1. Alternatively, you can simply enter ssh-keygen and then enter responses when prompted for a name and a passphrase. The keys will be created with default values: RSA keys of 2048 bits.

1. Description of this image
   1. To see that the files were created, type ls path/root_name*, for example,