I’ve always added my public key to a remote host’s authorized_keys file manually, but happened across the “ssh-copy-id” command which does that for you.<\/p>\n
[lisa@workstation-fedora .ssh]$ ssh-copy-id -o PreferredAuthentications=password -o PubkeyAuthentication=no lisa@fedora123.example.com<\/strong> Number of key(s) added: 1<\/p>\n Now try logging into the machine, with: “ssh -o ‘PreferredAuthentications=password’ -o ‘PubkeyAuthentication=no’ ‘lisa@fedora123.example.com'” Omit the -o options when attempting to log in over the key-based authentication. This, of course, presupposes that you have<\/em> a public\/private key pair. To create one, use ssh-keygen -t rsa -b 2048<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":" I’ve always added my public key to a remote host’s authorized_keys file manually, but happened across the “ssh-copy-id” command which does that for you. [lisa@workstation-fedora .ssh]$ ssh-copy-id -o PreferredAuthentications=password -o PubkeyAuthentication=no lisa@fedora123.example.com The authenticity of host ‘fedora123.example.com (10.1.2.3)’ can’t be established. ECDSA key fingerprint is SHA256:5EuKd5LNRnx5sHgQNFb6HO6W\/p0hQk4pEmShTgj3zyU. Are you sure you want to continue connecting (yes\/no\/[fingerprint])? …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[783,294,782],"class_list":["post-5351","post","type-post","status-publish","format-standard","hentry","category-system-administration","tag-key-based-authentication","tag-linux","tag-ssh"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/5351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5351"}],"version-history":[{"count":2,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/5351\/revisions"}],"predecessor-version":[{"id":5353,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/5351\/revisions\/5353"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nThe authenticity of host ‘fedora123.example.com (10.1.2.3)’ can’t be established.
\nECDSA key fingerprint is SHA256:5EuKd5LNRnx5sHgQNFb6HO6W\/p0hQk4pEmShTgj3zyU.
\nAre you sure you want to continue connecting (yes\/no\/[fingerprint])? yes
\n\/usr\/bin\/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
\n\/usr\/bin\/ssh-copy-id: INFO: 1 key(s) remain to be installed — if you are prompted now it is to install the new keys
\nlisa@fedora123.example.com’s password:<\/p>\n
\nand check to make sure that only the key(s) you wanted were added.<\/p>\n