{"id":13960,"date":"2022-09-22T15:16:45","date_gmt":"2022-09-22T12:16:45","guid":{"rendered":"https:\/\/www.hyyat.com\/?post_type=docs&p=13960"},"modified":"2022-09-22T15:18:21","modified_gmt":"2022-09-22T12:18:21","password":"","slug":"storage-box-ssh-keys","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/storage-box-ssh-keys\/","title":{"rendered":"Storage Box SSH Keys"},"content":{"rendered":"

Storage Box SSH Keys<\/h1>\n
\n

<\/h1>\n<\/article>\n

SSH key authentication for Storage Boxes<\/h1>\n

If you use SCP, SFTP, rsync or BorgBackup, you can log in using SSH key authentication without entering a password.<\/p>\n

Depending on the SSH port of the Backup account\/Storage Box you use, you may need to use a specific format for the public SSH key. The following keys are supported:<\/p>\n\n\n\n\n\n\n
SSH Port<\/th>\nKey Format<\/th>\nAlgorithms<\/th>\n<\/tr>\n<\/thead>\n
22<\/td>\nRFC4716<\/td>\nRSA, ECDSA<\/td>\n<\/tr>\n
23<\/td>\nStandard OpenSSH Format<\/td>\nRSA, ECDSA, ED25519<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

If you want to use the services over both ports, then you must store the public SSH key in both formats (RFC4716 and OpenSSH format) in the .ssh\/authorized_keys<\/code> file. Please note that a new line should be at the end of the file.<\/p>\n

Each sub-account requires its own authorized_keys file in the sub-account’s directory.<\/p>\n

<\/h2>\n

Generating SSH keys<\/h2>\n

You can use ssh-keygen to generate a new pair of SSH keys:<\/p>\n

\n\n\n\n
\n
server> ssh-keygen\r\nGenerating public\/private rsa key pair.\r\nEnter file in which to save the key (\/root\/.ssh\/id_rsa):\r\nEnter passphrase (empty for no passphrase):\r\nEnter same passphrase again:\r\nYour identification has been saved in \/root\/.ssh\/id_rsa.\r\nYour public key has been saved in \/root\/.ssh\/id_rsa.pub.\r\nThe key fingerprint is:\r\ncb:3c:a0:39:69:39:ec:35:d5:66:f3:c5:92:99:2f:e1 root@server\r\nThe key's randomart image is:\r\n+--[ RSA 2048]----+\r\n|                 |\r\n|                 |\r\n|                 |\r\n|         .   =   |\r\n|      . S = * o  |\r\n|   . = = + + =   |\r\n|    X o =   E .  |\r\n|   o + . .   .   |\r\n|    .            |\r\n+-----------------+<\/code><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
Warning: With the default settings, using ssh-keygen will overwrite an existing SSH key! As an alternative, with the parameter -f<\/code>, you can specify a different file path.<\/p>\n
<\/h2>\n
Upload<\/h2>\n
Please activate the SSH service of your Storage Box within Robot. Afterwards you can upload your public key with the following command for both Storage Box ports:<\/p>\n
\n\n\n\n
\n
server> cat ~\/.ssh\/id_rsa.pub | ssh -p23 uXXXXX@uXXXXX.your-storagebox.de install-ssh-key\r\nuXXXXX@uXXXXX.your-storagebox.de's password:\r\nKey No. 1 (ssh-rsa user@host) was installed in RFC4716 format\r\nKey No. 1 (ssh-rsa user@host) was installed in OpenSSH format<\/code><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
After this you can use the public SSH key to login without a password.<\/p>\n
<\/h2>\n
Manual<\/h2>\n
You can also upload your key manually. Therefor please use the following guides:<\/p>\n
<\/h3>\n
Extended SSH Service on Port 23 (SFTP\/Rsync\/BorgBackup)<\/h3>\n
Port 23 uses the one-line OpenSSH format of the public key.<\/p>\n
<\/h4>\n
Upload with ssh-copy-id (OpenSSH 8.5+)<\/h4>\n
You can use ssh-copy-id<\/code> to upload the new key:<\/p>\n\n\n\n
\n
\n
ssh-copy-id -p 23 -s uXXXXX@uXXXXX.your-storagebox.de<\/code><\/span><\/pre>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Upload without ssh-copy-id \/ Manually<\/h4>\n
If you have an older OpenSSH client software, you can upload the public key also manual:<\/p>\n
\n\n\n\n
\n
ssh -p 23 uXXXXX@uXXXXX.your-storagebox.de mkdir .ssh\r\nscp -P 23 .ssh\/id_rsa.pub uXXXXX@uXXXXX.your-storagebox.de:.ssh\/authorized_keys<\/code><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
<\/h3>\n
SSH Service on Port 22 (SFTP)<\/h3>\n
For the SSH service on port 22, you must convert your public key into the RFC4716 format and then upload it.<\/p>\n
<\/h4>\n
Converting your key to RFC4716 format<\/h4>\n
To convert the public SSH key into the correct format, enter the following command:<\/p>\n
<\/code><\/p>\n\n\n\n
ssh-keygen -e -f .ssh\/id_rsa.pub > .ssh\/id_rsa_rfc.pub<\/code><\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u00a0<\/code><\/p>\n
The public SSH key should now look like the one below:<\/p>\n
\n\n\n\n
\n
server> cat .ssh\/id_rsa_rfc.pub\r\n---- BEGIN SSH2 PUBLIC KEY ----\r\nComment: \"<comment>\"\r\nAAAAB3NzaC1yc2EAAAABIwAAAQEAz+fh731CVfH3FPM0vK5hX7NT5HogdBEQ4ryGJIeVMv\r\nmCQJWwrFtdWh1pXMyXsYzXq1xbjILgCZGn+H0qUBKopJaa\/Pzsw5U0UyRgiFhU2k0eiHUq\r\npkiixTbHcLsCj3kjAv5i07wZJ\/ot246hLQD1PtSQtcX7nHvhdhenOTGO+ccpM2KEdX1E64\r\neaTtO9Bf7X4OTXnRxS7tjYH9sls5DOunpvoIZLvbmcVw1+wMdJBXOAU6\/tnkN5N3mYE4Hu\r\nJjnRtBAI9MS9Tt3DNAp1K\/udUHA6hfYf08fxYs9uwsCM793b7FczmVvHEIwIKszG7Jwiwo\r\nDqit4EExR8bNNCeD6D3Q==\r\n---- END SSH2 PUBLIC KEY ----<\/code><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
<\/h4>\n
Upload<\/h4>\n
Now upload the created file:<\/p>\n
\n\n\n\n
\n
echo \"mkdir .ssh\" | sftp uXXXXX@uXXXXX.your-storagebox.de\r\nscp .ssh\/id_rsa_rfc.pub uXXXXX@uXXXXX.your-storagebox.de:.ssh\/authorized_keys<\/code><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
<\/h3>\n
Test<\/h3>\n
Depending on which SSH key format you have uploaded, you should be able to log in without a password on port 22 and\/or 23:<\/p>\n
\n\n\n\n
\n
sftp -P <22 or 23> <username>@<username>.your-storagebox.de\r\nConnected to <username>.your-storagebox.de.\r\nsftp> quit<\/code><\/span><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
Storage Box SSH Keys SSH key authentication for Storage Boxes If you use SCP, SFTP, rsync or BorgBackup, you can log in using SSH key authentication without entering a password. Depending on the SSH port of the Backup account\/Storage Box you use, you may need to use a specific format for the public SSH key. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_eb_attr":"","inline_featured_image":false,"wprm-recipe-roundup-name":"","wprm-recipe-roundup-description":"","footnotes":""},"doc_category":[2815],"doc_tag":[],"class_list":["post-13960","docs","type-docs","status-publish","hentry","doc_category-storag-box"],"year_month":"2026-05","word_count":660,"total_views":"4276","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"admin","author_nicename":"admin","author_url":"https:\/\/www.hyyat.com\/en\/author\/admin\/"},"doc_category_info":[{"term_name":"Storage Box","term_url":"https:\/\/www.hyyat.com\/en\/kb\/storag-box\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/13960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/comments?post=13960"}],"version-history":[{"count":0,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/13960\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/media?parent=13960"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_category?post=13960"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_tag?post=13960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}