Configuring SSH Key on a Mac with Cyberduck

UW ARCC is changing the way you authenticate on our devices and ssh authentication is now available using a public/private ssh key combination. This makes it possible to authenticate your login on WildIris without a password.

What this means for our users: This change standardizes the way all ARCC WildIris users log into the WildIris cluster, and once complete, should make the process easier.

1. A public/private key pair has already been created on WildIris. To access your key, go to: https://wiodm01.arcc.uwyo.edu/

2. Log into your account the way you have previously, by putting your WildIris username in the username textbox. In the password box, put in your WildIris password. Immediately following that (no spaces, commas or other characters) enter or paste in in your 2 factor code from your authentication application.

3. Once logged into WildIris OnDemand, open a WildIris Shell by clicking on pinned Wildiris Shell Access app:

   Open

   

4. This will open a virtual terminal window in WildIris.

5. Type the following command to view the contents of your private key: cat .ssh/id_rsa. Note: This will show the entire contents of your private key. ~!!Do not share the contents of the key with others!!~

6. Copy the contents of the key text beginning from the text -----BEGIN OPENSSH PRIVATE KEY----- through -----END OPENSSH PRIVATE KEY-----. If your browser prompts asking if it’s ok to access the clipboard, allow this.

7. On a Mac using terminal:

   1. Open up a terminal window, and navigate to your ssh folder with: cd ~/.ssh

   2. create a new ssh private key with vi wildiris_rsa.

   3. This will open the Vi file editor and create a new file named wildiris_rsa in which you can paste the private key that you copied from WildIris.

   4. Hit cmd+p to paste the contents of your private key into the new file.

   5. Once pasted, hit the esc key to exit out of file editing.

   6. Then type :wq! and hit your return key to write the contents and close out of the file editor.

   7. Lastly, update the permissions for your new file so it may only be read/written to by you with the command: chmod 600 wildiris_rsa

   8. Once this is completed, close out of your terminal window and open a new terminal window to test your ability to log in.

   9. Assuming mac terminal opens by default in your home folder (~) the command to log into WildIris using your private key would be: ssh <your_username>@wildiris.arcc.uwyo.edu -i .ssh/wildiris_rsa

   10. If it worked, you will be logged into WildIris automatically, and will not be prompted for a password, nor your first factor, and second factor authentication for login.

8. Configure Cyberduck for SFTP:

   1. Launch Cyberduck. This should bring up an empty connection profile (unless items are imported).

   2. Click the “+” button to add a new connection.

      Open

      

   3. Choose the SFTP option from the drop down for connection type.
      
      

   4. Fill out SFTP Connection as listed below:
      
      

   5. Once complete, test the connection by right clicking the saved connection in your list and choosing the “Connect to Server” option. If successful, you should see the wildiris file structure come up as a list in cyberduck.