next up previous
Next: Managing keys in memory Up: Configuration and setup Previous: Logging into remote systems

Storing authentication keys in memory

If you frequently open connections to remote systems, you can run your session under "ssh-agent". The agent will provide decrypted authentication keys to all your ssh commands when new connections are created, thus eliminating the need to continually enter your passphrase.

When you start ssh-agent, you need to provide it with a command to spawn. This is usually either a shell or a command to start a windowing environment. When you exit the command, all your keys will be removed from memory.

    [WOMBATNET:/home/wombat]
    $ ssh-agent $SHELL
    [WOMBATNET:/home/wombat]
    $

You now need to add your keys to memory by running ssh-add to make them available for subsequent ssh commands.

NOTE: "ssh-agent" should not be run on systems with questionable security, as it is possible, if the system is compromised, to read passphrases out of memory.


next up previous
Next: Managing keys in memory Up: Configuration and setup Previous: Logging into remote systems

If you have questions about this document, please contact SCD Customer Support. You can also reach us by telephone 24 hours a day, seven days a week at 303-497-1278. Additional contact methods: consult1@ucar.edu and during business hours in NCAR Mesa Lab Suite 39.