Because of the server security problem, to prevent others from brute force, but also to let the administrator exempt from recording multiple complex passwords, so the use of certificate login server is becoming more and more important.
Download Puttygen.exe first. Run click Generyte to generate a pair of secret keys
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6C/C0/wKioL1VRok3jILh9AAKGCfl_COk041.jpg "title=" Y) O51] Jff5q0}s) cb53y8qg.png "alt=" Wkiol1vrok3jilh9aakgcfl_cok041.jpg "/>
Copy the public key to a file named Authorized_keys
Save the private key, named *.PPK end
Create a regular user, useradd Erick
Su Erick | Mkdir-m. SSH
Put the file you just saved in the. SSH directory and configure the permissions chmod 600 *
Try to log in using the Putty secret key
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/6C/C6/wKiom1VRojeyVEvhAAH4aZrst30859.jpg "title=" U] QLE@YTHH3) Je_jhi ' H (ir.png "alt=" Wkiom1vrojeyvevhaah4azrst30859.jpg "/>
Select Certificate
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/6C/C0/wKioL1VRpBGwd0_OAAI8Yfqihqk305.jpg "title=" Mz7npm2]~al6[g7b83%8y9n.png "alt=" Wkiol1vrpbgwd0_oaai8yfqihqk305.jpg "/>
Select OK, click Open
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/6C/C0/wKioL1VRpGKjBmGCAAD4xA86n_o200.jpg "title=" IOO6H2NZA4OMMLN)) tr9exb.png "alt=" Wkiol1vrpgkjbmgcaad4xa86n_o200.jpg "/>
You can see the logged-on user as Erick and log on with a certificate
9 for security, you can also set the Prohibit password login, only allow the secret key login
Vim/etc/ssh/ssh_config
To change the 50th line of gssapiauthentication Yes to No, restart the sshd service.
This article is from "Perfect world!" "Blog, be sure to keep this provenance http://shyln.blog.51cto.com/6890594/1650639
Implementing a certificate Login with putty under Windows