{"id":957,"date":"2012-01-16T12:26:05","date_gmt":"2012-01-16T12:26:05","guid":{"rendered":"http:\/\/stevenwhiting.com\/blog\/?p=957"},"modified":"2012-05-01T13:13:46","modified_gmt":"2012-05-01T12:13:46","slug":"access-pgp-universal-server-3-x-using-putty","status":"publish","type":"post","link":"https:\/\/stevenwhiting.com\/blog\/?p=957","title":{"rendered":"Access PGP Universal Server 3.x using PuTTY"},"content":{"rendered":"<p>This is because the Console is disable by default.<\/p>\n<p><a href=\"http:\/\/www.symantec.com\/business\/support\/index?page=content&amp;id=TECH149673\" target=\"_blank\">http:\/\/www.symantec.com\/business\/support\/index?page=content&amp;id=TECH149673<\/a><\/p>\n<blockquote>\n<div>\n<h3>Problem<\/h3>\n<div>\n<p>To gain command line access to a PGP Universal Server, you will need to create an SSH key. You can do this using a utility such as PuTTYgen to create an SSH key and PuTTY to log in to the command line interface. This article details how to utilize PuTTYgen and PuTTY to access a PGP Universal Server.<\/p>\n<p>PuTTY is a freeware suite of SSH tools. The PuTTY suite includes PuTTYgen, PuTTY, PSFTP, and Pageant the PuTTY authentication agent. The PuTTYgen and PuTTY.exe files are also available to be downloaded separately.<\/p>\n<\/div>\n<\/div>\n<p>&nbsp;<\/p>\n<h3>Solution<\/h3>\n<p>&nbsp;<\/p>\n<p><strong>Using PuTTYgen<\/strong><\/p>\n<p>To create an SSH keypair using PuTTYgen<\/p>\n<p>These steps assume the entire suite of PuTTY utilities is installed on the computer. The following steps may also be performed using the separately downloaded PuTTYgen.exe and PuTTY files.<\/p>\n<ol>\n<li>Open PuTTYgen from the <strong>Start<\/strong> menu.<\/li>\n<li>Confirm the <em>Parameters<\/em> (at the bottom of the PuTTY\u00a0Key Generator window) for the type of key to generate. The parameters of the key must utilize one of the SSH2 options. We recommend that you choose SSH-2 RSA\u00a0(the default). Set the Number of bits to 2048<\/li>\n<li>Create a key pair by clicking on the <strong>Generate<\/strong> button in the <em>Actions<\/em> section. Generate some randomness for the key by moving the mouse over the blank area.<\/li>\n<li>After the key generation is complete, copy the public key block from PuTTY window into PGP Universal Server admin account by performing the following:<\/li>\n<li><em>Copy<\/em> the public key from the clipboard window in the PuTTY\u00a0Key Generator where it says &#8220;Public key for pasting into OpenSSH\u00a0authorized_keys file:&#8221;<\/li>\n<li>Log in as a superuser to the PGP Universal Server admin interface.<\/li>\n<li>Select the <strong>System &gt; Administrators<\/strong> card then click on a <em>superuser<\/em> account. Please note:\u00a0It does require them to be a superuser administrator to use SSH access. Other roles are not supported.<\/li>\n<li>Click the plus <strong>+<\/strong> sign at the end of the SSHv2 Key line. This will bring up a window that displays <em>Update SSH Public Key<\/em>.<\/li>\n<li>Click the <strong>Import Key Block<\/strong> radio button and paste the public key block that you just generated with PuTTYgen directly into this block and click the <strong>Import<\/strong> button.<\/li>\n<li>After you upload the key block you will notice the hex fingerprint of the key will now show up in SSHv2 Key line. You can verify that the fingerprint matches the fingerprint found in the <em>Key fingerprin<\/em>t line on PuTTY\u00a0Key Generator to verify that the key was imported succesfully<\/li>\n<li>Click <strong>Save<\/strong> and close the administrative interface.<\/li>\n<li>Next go back to your desktop and save the public and private key within PuTTYgen.<\/li>\n<\/ol>\n<table width=\"100%\" border=\"0\" cellspacing=\"15\" bgcolor=\"#e7eff7\">\n<tbody>\n<tr valign=\"middle\">\n<td>\n<p align=\"left\"><span style=\"font-size: x-small;\"><strong>Note:<\/strong> The minimum key size when generating a key is 1024 bit. Intermittently PuTTYgen may generate a 1024 bit key as a 1023 bit key due to a bug in PuTTYgen. Thereby causing the key not to work properly. The best practice is to generate a key of at least 1025 bit to avoid the potential problem. We recommend generating a key 2048 bit in length to solve this issue.<br \/>\n<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Access the PGP Universal Server using PuTTY<\/strong><\/p>\n<p>Use the following steps to access the command line interface.<\/p>\n<ol>\n<li>Open PuTTY from the <strong>Start<\/strong> menu.<\/li>\n<li>Enter the PGP Universal Server hostname (<em>keys.domain.com<\/em>) or IP address in the hostname field<\/li>\n<li>If not already entered, change the Port field to use port 22.<\/li>\n<li>Select the <strong>SSH<\/strong> radio button as the protocol.<\/li>\n<li>Click <strong>Auth<\/strong> (under Category&gt;Connection&gt;SSH)<\/li>\n<li>Browse to the private key and add the file that you saved and click <strong>Open<\/strong> to start a session. You will be prompted to enter a username.<\/li>\n<li>Type: root and press enter.<\/li>\n<\/ol>\n<table width=\"100%\" border=\"0\" cellspacing=\"15\" bgcolor=\"#e7eff7\">\n<tbody>\n<tr valign=\"middle\">\n<td>\n<ul>\n<li><span style=\"font-size: x-small;\">If your public key is not accepted by the PGP Universal Server when you are trying to paste it in from the PuTTYgen window, make sure you are not accidentally adding whitespace when pasting the keyblock. If it still doesn&#8217;t work go through the entire key generation process again. From within Puttygen make sure you have clicked at the very bottom: SSH-2 for the type of key to generate.<\/span><\/li>\n<li><span style=\"font-size: x-small;\">If your public key is not being accepted and you receieve an error stating that the SSH\u00a0key is not valid when importing on the\u00a0 PGP\u00a0Universal Server. This may be due to you saving the key file using the Save public key option in the PuTTY\u00a0Key Generator utility. Which uses a format that the PGP\u00a0Universal Server doesn&#8217;t support. Be sure to copy the key from the portion of the clipboard as described in Step 5 above.<\/span><\/li>\n<li><span style=\"font-size: x-small;\">The first time you log on to a PGP Universal Server with PuTTY you will be given a security warning, this is normal, just click yes and proceed as above.<\/span><\/li>\n<li><span style=\"font-size: x-small;\"><span style=\"font-size: x-small;\">Saving your session for future use:<\/span><\/span>You may want to go back to the (Category-&gt;session) tab and type a descriptive name in the box directly under the words <em>Saved Sessions<\/em>. If you do this and click <strong>Save<\/strong> you will notice that the name you typed appears in the larger box as a Saved Session. Now you will be able to access your configured logon for this PGP Universal Server in the future just by double-clicking on the saved session name.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Accessing the PGP Universal Server command line for read-only purposes (such as to view settings, services, logs, processes, disk space, query the database, etc) is supported. However, performing configuration modifications or customizations via the command line may void your PGP Support agreement unless the following procedures are followed.<\/p>\n<p>Any changes made to the PGP Universal Server via the command line must be:<\/p>\n<ul>\n<li>Authorized in writing by\u00a0Symantec Technical\u00a0Support or published as an approved and documented process on the Symantec Knowledge Base.<\/li>\n<li>Implemented by a\u00a0Symantec Partner, reseller or internal employee who is certified in the PGP Advanced Administration and Deployment Training.<\/li>\n<li>Summarized and documented in a text file in \/var\/lib\/ovid\/customization on the PGP Universal Server itself.<\/li>\n<\/ul>\n<p align=\"left\"><span style=\"font-size: x-small;\"><strong>Note:<\/strong> Changes made through the command line may not persist through reboots and may be incompatible with future releases. PGP Support may also require reverting any custom configurations on the PGP Universal Server back to a default state when troubleshooting new issues.<\/span><\/p>\n<\/blockquote>\n<p align=\"left\">\n","protected":false},"excerpt":{"rendered":"<p>This is because the Console is disable by default. http:\/\/www.symantec.com\/business\/support\/index?page=content&amp;id=TECH149673 Problem To gain command line access to a PGP Universal Server, you will need to create an SSH key. You can do this using a utility such as PuTTYgen to &hellip; <a href=\"https:\/\/stevenwhiting.com\/blog\/?p=957\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[204],"class_list":["post-957","post","type-post","status-publish","format-standard","hentry","category-it-notes","tag-pgp"],"_links":{"self":[{"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=957"}],"version-history":[{"count":4,"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/957\/revisions"}],"predecessor-version":[{"id":960,"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/957\/revisions\/960"}],"wp:attachment":[{"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stevenwhiting.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}