Bastionhost supports three authentication methods for host accounts: password-based authentication, SSH private key-based authentication, and shared key. After an administrator configures an authentication method for a host account and grants a Bastionhost user permissions on the host and its account, the user can use the account to log on to the asset without a password.
Password authentication
Log on to the Bastionhost system. For more information, see Log on to the system.
In the navigation pane on the left, choose .
On the Hosts page, find the host you want to configure and click its name.
On the Host Account tab, you can create, change, or clear a password.
The following items describe how to manage passwords:
Create or change a password
Click the logon name. In the Edit Host Account panel that appears, enter a password and click Verify.
NoteThe logon name and password for the host account must match the username and password configured on the asset. Bastionhost performs the verification over the specified port. If an error occurs, check the host's port settings and the network connectivity between the asset and Bastionhost. For more information, see Diagnose network issues.
For troubleshooting information about password verification errors, see What do I do if an error occurs when I verify the password for a new host account in Bastionhost?.
Clear a password
To clear a password, find the corresponding logon name and click Clear in the Password column.
SSH private key authentication
For hosts that use SSH key pair authentication, configure SSH private key-based authentication:
Log on to the Bastionhost system. For more information, see Log on to the system.
In the navigation pane on the left, choose .
On the Hosts page, find the host you want to configure and click its name.
On the Host Account tab, find the logon name you want to configure and click Set in the SSH Private Key column.
In the Set Private Key dialog box, enter the private key and click Save.
After you configure the private key, you can remove it by clicking Clear in the SSH Private Key column.
NoteBastionhost supports only RSA keys and Ed25519 keys generated by the
ssh-keygencommand.For example, you can use the
ssh-keygencommand on a Linux host to generate a public key and a private key. You then store the public key in the appropriate directory on the host and export the private key to your local computer. Then, enter the private key in this step. For more information, see How do I generate a key pair and configure key-based authentication to access a server?.If the private key is not protected by a passphrase, you can leave the Encryption Password field empty.
Shared key authentication
Before you configure shared key-based authentication, you must configure shared keys in key management. For more information, see Shared Key.
Log on to the Bastionhost system. For more information, see Log on to the system.
In the navigation pane on the left, choose .
On the Hosts page, find the host you want to configure and click its name.
On the Host Account tab, find the logon name you want to configure and click Set in the Shared Key column.
In the Set Shared Key dialog box, select the shared key and click Save.
After you configure the shared key, you can remove it by clicking Clear in the Shared Key column.