Public Key Authentication

• SSH key pair authentication is a recommended way to log in to your Ultra slot over SSH. It is more secure and more convenient than using only your SSH/FTP password.
• With SSH keys, you create a key pair on your local device:
• A private key, which stays on your device
• A public key, which is added to your Ultra slot
• When you connect, your SSH client uses the private key on your device to prove that it matches the public key on your slot. If the keys match, the server allows the login.
• SSH keys provide stronger protection against brute-force attacks than passwords. You can increase security further by protecting your private key with a passphrase.
• This guide explains how to:
• Generate an SSH key pair
• Add your public key to your Ultra slot
• Connect with SSH key authentication
• Configure PuTTY for key authentication on Windows

Before you begin

You will need:

• An Ultra service with SSH access
• Your Ultra SSH connection details from the User Control Panel
• Your Ultra SSH/FTP password, at least for the initial setup
• An SSH client such as OpenSSH, PuTTY, or Termius
• Your SSH connection details are available in the Connect tab of the User Control Panel.

Hostname: <servername>.usbx.me or IP address
Username: <your-ultra-username>
Password: <your-ssh/ftp-password>
Port: 22

• If you have not connected to your slot with SSH before, see Connect to your Ultra slot via SSH.

OpenSSH

• OpenSSH is available on Linux, macOS, and modern Windows systems.

Create Public and Private Keys

• On your computer, type in ssh-keygen and press ENTER. This should start generating public and private key pairs.
• By default it generates a 2048-bit RSA key pair which is sufficient in most cases

$ ssh-keygen
Generating public/private rsa key pair.

• We also recommend to generating the following keys which are more secure than the default.
• To generate an RSA 4096 key: ssh-keygen -b 4096.
• Much more secure than 2048 bit is slower when logging into your slot.
• To generate a ed25519 key: ssh-keygen -t ed25519.
• New algorithm, has a smaller key size and faster generation with security comparable to RSA ~3000.
• Here, you can press ENTER to save the key pair into the .ssh/ subdirectory in your home directory.
• For Windows, your User Folder is typically in C:\Users\username\.ssh.
• For Linux it's /home/username/.ssh.
• You may also specify an alternate path.

$ ssh-keygen -b 4096
Generating public/private rsa key pair.
Enter file in which to save the key (/your_home/.ssh/id_rsa):

• Here you optionally may enter a secure passphrase. You can press ENTER to skip putting in a passphrase.
• It is recommended to add in a passphrase.
• A passphrase adds an additional layer of security to prevent unauthorized users from logging in should they have your private key.

$ ssh-keygen -b 4096
Generating public/private rsa key pair.
Enter file in which to save the key (/your_home/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:

• Then you should see the following output. You now have a public (id_rsa.pub) and a private key (id_rsa) stored in your home directory (or on the path you set) that you can use to authenticate when logging into SSH.

Import Your Public Key into your slot

There are two common ways to add your public key:

• ssh-copy-id
• Manual copy

ssh-copy-id

• This is the easiest and the most recommended but this command only works for Linux.
• For macOS, you might need to install it. To check, open up a terminal and type ssh-copy-id.
• If not found, you can install it using these commands below.
• Install using Homebrew: brew install ssh-copy-id.
• Install using Macports: sudo port install openssh +ssh-copy-id.
• Install using CURL: curl -L https://raw.githubusercontent.com/beautifulcode/ssh-copy-id-for-OSX/master/install.sh | sh.
• Type in ssh-copy-id [ultradocs@servername.usbx.me] or ssh-copy-id ultradocs@servername.usbx.me.

$ ssh-copy-id ultradocs@servername.usbx.me

• The following output appears. This is normal. This means that your computer does not recognize your slot. This will happen the first time you connect to a new host. Type yes and press ENTER to continue.

$ ssh-copy-id ultradocs@servername.usbx.me
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/xanban/.ssh/id_rsa.pub"
The authenticity of host 'servername.usbx.me (46.182.109.120)' can't be established.
ECDSA key fingerprint is SHA256:9mQKWg1PVPZtzZ6d5nDjcWUb/Flkuq5VHYRrvwTeRTE.
Are you sure you want to continue connecting (yes/no)?

• Type in the SSH password you set in UCP.

• Once you entered your password, OpenSSH will connect to the slot. It will then copy the contents of your ~/.ssh/id_rsa.pub key into a file in your slot's home directory at ~/.ssh called authorized_keys. Then you should see the following output. At this point, your id_rsa.pub key has been uploaded to the slot.

• Once everything is done, you can login to your slot with just ssh username@servername.usbx.me which will go straight to your shell securely. If you set a password for your keys, enter your password.

Manual Copy of Public Key

This is another way is to manually copy the contents of your private key file to your slot should ssh-copy-id failed. This method works on Windows, Linux and macOS users.

• View your public key file id_rsa.pub by opening it using your text editor and copy the whole content
• Login to your slot using the set password in UCP
• Once logged in, create a directory named .ssh with mkdir -p ~/.ssh
• Then do echo public_key_string >> ~/.ssh/authorized_keys replacing public_key_string with the contents of your public key file

 mkdir -p ~/.ssh

echo ssh-rsa AAAAB3NzaC1ycrandom_characters_here_lol xanban@randomPC >> ~/.ssh/authorized_keys

• Then type chmod -R go= ~/.ssh to recursively removes all "group" and "other" permissions for the ~/.ssh/ directory.

 chmod -R go= ~/.ssh

• Exit SSH try to login to your slot with just ssh [username@servername.usbx.me which will go straight to your slot's shell.
• If you set a password for your keys, enter your password.

PuTTYgen

This method works for Windows users only.

Create Key Pairs Using PuTTYgen

• Open up PuTTYgen. You'll be greeted with this window.

• On the bottom under the Parameters section, you can choose which key do you want to generate and how many bits that you generate.
• The default is RSA-2048 which is sufficient in most cases.
• You may also change the parameters to your liking. The following are:
• RSA 4096
• Ed25519
• Once that's done, click Generate.
• From here, you're going to follow the instructions on the program. Seen here, you only need to move your cursor within the program.
• This is to create entropy, which is needed by PuTTYgen to generate random numbers needed to generate keys.
• After that, the actual generation of the key takes place.
• When finished, you'll see the following information.
• You may optionally enter your password in the Key Passphrase and Confirm passphrase text boxes.
• It is recommended to add in a passphrase.
• A passphrase adds an additional layer of security to prevent unauthorized users from logging in should they have your private key.
• If you opt to not add a password so you can login to your slot's SSH without inputting any password, you can leave these blank.
• Hit Save private key, click yes if you did not put a password and save it to a directory you choose.
• This will be saved in .ppk format.
• Copy the contents inside the Public key for pasting into OpenSSH authorized_keys file.

Import Public Key to your slot

• Login to your slot using the set password in UCP.
• Once logged in, create a directory named .ssh with mkdir -p ~/.ssh.
• Then do echo public_key_string >> ~/.ssh/authorized_keys replacing public_key_string with the generated public key file in PuTTYgen.

ultradocs@servername:~$ mkdir -p ~/.ssh

ultradocs@servername:~$ echo ssh-rsa AAAAAAAAlol rsa-key-2012-12-12 >> ~/.ssh/authorized_keys

• Then type chmod -R go= ~/.ssh to recursively removes all "group" and "other" permissions for the ~/.ssh/ directory.

ultradocs@servername:~$ chmod -R go= ~/.ssh

Set PuTTY to use Key Authentication

• Open PuTTY and load up your session.
• In Connection → SSH → Auth, you'll see an option for the Private key file for authentication.
• Click Browse, navigate to your newly made private key and select it.
• Save your session by selecting your Session name and hit Save.
• Now, if setup correctly you can just click Open or double click the session name, enter your password (if you set it) and you can log in to your slot securely.

If you require further assistance, you can open a support ticket here!

• Public Key Authentication
• Before you begin
• OpenSSH
• Create Public and Private Keys
• Import Your Public Key into your slot
• ssh-copy-id
• Manual Copy of Public Key
• PuTTYgen
• Create Key Pairs Using PuTTYgen
• Import Public Key to your slot
• Set PuTTY to use Key Authentication