Connector Guides › Connectors Guide › Connecting to Endpoints › Kerberos Connector › Kerberos Installation and Deployment › Install and Deploy the Connector › How to Set Up SSH Permissions for the Kerberos Connector › Generate an RSA Key Pair Using puttygen

Generate an RSA Key Pair Using puttygen

To use the connector on a Java CS host that is on Windows or Linux host that is not a member of the realm, use puttygen to generate the key pair in the Java CS host.

As the private key file must be in the Java CS host, we recommended that you install puttygen on the Java CS host so that the generated private key stays in the JavaCS host. Installing puttygen on the Java CS host means that you do not need to copy the private key file to the Java CS host when the key is generated on another host.

To generate an RSA key pair using puttygen

1. On the Java CS host, start puttygen.
2. Under Parameters, select either SSH-2 RSA or SSH-2 DSA.
3. Click Generate.

   Puttygen generates the public key.

4. Copy the text in the field Public key field for pasting into OpenSSH authorized_keys file into a text file.
5. In the home directory of account used by the connector to log in to the SSH Server host, create a directory named .ssh.
6. Copy the public key file to the SSH Server host.
7. Verify that the .ssh/authorized_keys file in the home directory of the account that the connector use to log in exists. Then, do one of the following:
   • If the .ssh/authorized_keys file exists, append the public key to the .ssh/authorized_keys file in the home directory of the account that the connector uses to log in.
   • If the .ssh/authorized_keys does not exist, create the file, then append the public key to the .ssh/authorized_keys file in the home directory of the account that the connector uses to log in.
8. Click Conversions, Export OpenSSH key.

   The File Save dialog appears.

9. Specify a file name where the private key is stored, then click OK.

   The file name (with absolute or relative path) is the value for eTKRBSSHPrivateKeyFile.

10. If you want to manage a Kerberos endpoint using a Windows Java CS rather than a Kerberos Java CS, use etautil to assign the private key filename (with absolute or relative path) to eTKRBSSHPrivateKeyFile.