6.5.1 Set Up the SFTP Private Key

Log in to OFSAA UNIX user using the Putty tool, where you plan for installation and generate a pair of authentication keys using the ssh-keygen command. If required, set passphrase. Otherwise, the OFSAAI_SFTP_PASSPHRASE tag must be set to NA.

To generate a private key, enter the commands as shown:

ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/ofsaapp/.ssh/id_rsa):
Created directory '/home/ofsaapp/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/ofsaapp/.ssh/id_rsa.
Your public key has been saved in /home/ofsaapp/.ssh/id_rsa.pub.
The key fingerprint is:
3e:4f:05:79:3a:9f:96:7c:3b:ad:e9:58:37:bc:37:e4
ofsaapp@OFSASERVER:~> cat /home/ofsaapp/.ssh/id_rsa.pub >> /home/ofsaapp/.ssh/authorized_keys

Ensure the following permissions exist for the given directories:

• permissions of .ssh must be 700
• permissions of .ssh/authorized_keys must be 640
• permission of .ssh/id_rsa must be 400
• Permission of UNIX User created must be 755