Chapter 2: Client Connections
[root@mypc /]# scp /root/.ssh/id_rsa.pub
admin@myluna:
admin@myluna's password:
id_rsa.pub 100%
|*****************************| 220
00:00
4.
On the SafeNet Luna Network HSM appliance, verify the default settings of the Public Key Authentication
service:
[myLuna] lunash:>sysconf ssh show
SSHD configuration:
SSHD Listen Port: 22 (Default)
SSH is unrestricted.
Password authentication is enabled
Public key authentication is enabled
Command Result : 0 (Success)
5.
Verify that there are no public key entries by default:
[myLuna] lunash:>my public-key list
SSH Public Keys for user 'admin':
Name Type
Bits
Fingerprint
------------------------------------------------------------------------------
Command Result : 0 (Success)
6.
Add the public key that you sent over earlier (from server mypc in our example):
[myLuna] lunash:>my public-key add id_rsa.pub
Command Result : 0 (Success)
7.
Check the list again:
[myLuna] lunash:>my public-key
list
SSH Public Keys for user 'admin':
Name Type
Bits
Fingerprint
------------------------------------------------------------------------------
id_rsa.pub ssh-rsa
1024 6e:7a:7e:e1:2a:54:8f:99:3e:6a:56:f8:38:22:fb:a6
Command Result : 0 (Success)
Notice that the fingerprint reported is the same as was generated back on mypc.
8.
From mypc, SSH into myLuna; you should not be password prompted:
[root@mypc /]# ssh admin@myluna
SafeNet Luna Network HSM 7.0 Command Line Shell - Copyright (c) 2001-2017 Gemalto, Inc. All
rights reserved.
9.
Verify that you are still password prompted if you ssh from other clients:
bash-2.05b# ./ssh admin@myLuna
admin@myLuna's password:
10.
Disable public key authentication on myLuna, and verify the current status of the service:
SafeNet Luna Network HSM 7.3 Appliance Administration Guide
007-013576-005 Rev. A 13 December 2019 Copyright 2001-2019 Thales
36
