Establish an SSH Connection¶

After successfully installing the Director setup, you can access the Fabric Servers and API Server through the console as the cmdr-admin user and the LPSM through the console as the li-admin user. Go to SSH Key Pair for li-admin to establish an SSH connection for li-admin.

You must establish an SSH connection to upgrade the Director patches.

Configuring an SSH pair for cmdr-admin¶

Log into the Fabric Servers or API Server using cmdr-admin.
Create a directory in the Server using the following command:
```
mkdir ~/.ssh
```
Create an SSH pair in the Server using the following command:
```
ssh-keygen -t rsa
```
Copy the public key to authorized_keys using the following command:
```
cp <rsa_filename>.pub ~/.ssh/authorized_keys
```
Use addadminip command to add remote device IP address to the Server. The command will add a firewall rule required to access the Server through the remote device IP.
Move the private key to your local machine using the following command:
```
scp <rsa_filename> <user>@<destination_ip>:<path_in_remote_device>
```
Establish an SSH connection with the API using the following command:
```
ssh -i <id_rsa_path> cmdr-admin@<Server_IP>
```

Once you access the system, change the password using the passwd command.

Change SSH Keys¶

For Director API and Fabric servers v2.5.0 and later, we recommend you change the SSH key pair manually and generate an SSH key pair using the RSA algorithm. To change the SSH key pair manually:

Create SSH key pairs using the command:
```
ssh-keygen -t rsa -C "Director" -f director
```
A private key named director will be generated.

Important

You must repeat the following steps for both API server and Fabric server. If the Director Fabric is a cluster setup, follow these steps for all the cluster nodes.

Copy the generated private key to both API server and Fabric server. If the Director Fabric is a cluster setup, copy the key to all the cluster nodes using the following command:
```
scp director cmdr-admin@<machine-ip>:~/
```
<machine-ip> is the IP address of the API or Fabric server where you need to copy the SSH key.

This copies the director key to the home directory of the server with IP address.
Access each API server and Fabric server individually via SSH.
```
ssh cmdr-admin@<machine-ip>
```
Execute the following command:
```
change-server-keys director
```
This will replace the existing SSH key pair with a new SSH key pair.

Helpful?