How Can Write a Winscp Script for the Server Using Private Key as Password

Public Central Authentication (PKA) is a more secure way to cosign to a server than but using passwords. If you're security conscious (and who shouldn't be?) you lot'll want to enable it on your server for SFTP. Using PKA involves a little more attempt during the ready upwards phase than just passwords, just information technology's worth information technology for the added security.

Here, I demonstrate in the video and depict in the text how to generates keys in PuTTYgen, import and associate the public key with a user account in JSCAPE MFT Server Manager, and connect over SFTP using WinSCP.

1) Generate a public/private keypair using PuTTYgen (PuTTY Key Generator).

First, download PuTTYgen from this link : http://www.chiark.greenend.org.britain/~sgtatham/putty/download.html

Y'all can either download merely PuTTYgen or a Windows installer for virtually of the other PuTTY files.

If you apply the Windows installer, y'all can run PuTTYgen from All Programs -> PuTTY -> PuTTYgen.

Subsequently yous run PuTTYgen, click the Generate button to generate a public/private key pair. Then you'll want to put in a passphrase in the "Primal Passphrase" and "Confirm Passphrase" fields. You'll need to call up the passphrase when you use your individual key. Now you'll desire to Save the public central and Salvage the private key past pressing their respective buttons and putting in a filename.

2) Import the public portion into the Customer Keys tab in Key Manager in JSCAPE MFT Server Manager.

At present run JSCAPE MFT Server Manager. Then become to File -> Key Manager and brand sure you click the Client Keys tab. (Make sure you're Not on the Server Keys tab). From the Customer Keys tab, click Import. From in that location, y'all'll put in an Alias like the login you're going to acquaintance the public fundamental with. And so click Browse, to select the public key file that you saved in Step i. Then click OK to finishing importing the public key.

3) Associate with the user account on the User node in JSCAPE MFT Server Manager.

Go to the Users node then select the user business relationship you want to associate with the public central you just imported. Click Edit to open the Edit User Account window. Expect at the Client Keys department. Depending on how many keys are on the server, you may have to scroll down. Double click the one yous want. It will be named with the Alias you provided in Step 2. Click OK.

Note that to utilise, it MUST be enabled on the Services node, by clicking SFTP then edit. There you must change the Authentication type to "publickey", "password OR publickey", "password AND publickey". "publickey" means you lot login with just the public key and a password isn't used, "password OR publickey" ways y'all could login with either a password or a public central, and "password AND publickey" means you can simply login with both a password and public central.

4) Use the private key with WinSCP client to connect using the private key to the SFTP service on JSCAPE server.

Run WinSCP.
Under Session, you'll want to fill out the Host name, user name, and password fields with the advisable values. Click the button to the correct of the Private key file field and browse to the Private key you saved at the finish of Step 1. It will accept a .ppk file extension. The protocol should exist set to SFTP. If yous're going to connect to this server again, click Save to save it. Now you can click Login. A "Primal passphrase - user@server" window will pop upwards. Here you lot need to use the passphrase y'all entered (and think forever) from the end of Step i. Click OK and you lot'll exist logged in!

At present that information technology's all ready, yous can just click "Login" from WinSCP next fourth dimension. Information technology's just a modest corporeality of worhtwhile try at the get-go for vastly improved security.

References

JSCAPE MFT Server

Topics: JSCAPE MFT Server, Managed File Transfer, Security, Videos

johnsontheigh.blogspot.com

Source: https://www.jscape.com/blog/bid/38946/public-key-authentication-using-putty-and-winscp

Share this post