Create and place an SSH key on a dedicated server

SSH keys can be used for secure server connection via an encrypted SSH protocol. This is a key pair: the private key is stored on your local computer, and the public key is placed on the server.

For authorization on a dedicated Linux server, we recommend using SSH keys instead of a login and password.

You can use SSH keys of the following types: ed25519, rsa, ecdsa, and dsa.

1. Create an SSH key pair.

2. Optional: add a public SSH key to the SSH key repository.

3. Place a public SSH key on the server:

   • by reinstalling the OS;
   • without reinstalling the OS.

1. Create SSH keys

Linux/macOS

1. Open the CLI.

2. Generate an SSH key pair:

   ssh-keygen -t <key_type>

   Specify <key_type> — the SSH key type: ed25519, rsa, ecdsa, or dsa.

3. A message about choosing a directory to store the key pair will appear — an example for an rsa key:

   Enter file in which to save the key (~/.ssh/id_rsa):

   To keep the default directory for key storage, press Enter. If you want to select a different directory, specify the full path to it, for example /home/user/id_rsa, and press Enter.

4. Optional: enter a passphrase for additional security, repeat it, and press Enter. The passphrase will not be displayed in the command line:

   Enter passphrase (empty for no passphrase):
   Enter same passphrase again:

5. Wait for the message confirming that the keys have been generated. Two files will be created: id_rsa (private key) and id_rsa.pub (public key). The key fingerprint and its art will appear in the terminal:

   Your identification has been saved in ~/.ssh/id_rsa
   Your public key has been saved in ~/.ssh/id_rsa.pub
   The key fingerprint is:
   The key's randomart image is:

6. Display the public SSH key:

   cat <path>

   Specify <path> — the full path to the public key you specified in step 3, for example ~/.ssh/id_rsa.pub.

Windows

In Windows 10, you can create an SSH key pair via the command line (cmd.exe) just like in Linux or macOS. In earlier versions of Windows, PuTTY is used for this.

1. Install PuTTY.
2. Open the PuTTYgen application.
3. In the Parameters → Type of key to generate field, select the RSA key type.
4. Click Generate.
5. Move the cursor in the PuTTYgen window until the key pair is created.
6. After creating the keys, click Save public key and Save private key.
7. Specify the path for storing keys.
8. Optional: in the Key passphrase field, enter a passphrase for additional protection.
9. Copy the public SSH key.

2. Optional: add a public SSH key to the SSH key repository

A public SSH key can be added to the SSH key repository and placed on the server automatically when ordering a new server or when reinstalling the OS for an existing server.

1. In the Control panel, on the top menu, click Products and select Dedicated Servers.
2. Go to the SSH Keys section.
3. Click Add SSH key.
4. Enter the key name.
5. Paste the public SSH key.
6. Click Add.

3. Place an SSH key on a dedicated server

You can place a public SSH key:

• by reinstalling the OS;
• without reinstalling the OS.

Place an SSH key on a dedicated server by reinstalling the OS

1. In the Control panel, on the top menu, click Products and select Dedicated Servers.

2. In the Servers section, open the Server list tab.

3. Open the server page → Operating System tab.

4. Click Reinstall OS.

5. In the SSH key field, add an SSH key:

   • check the box for the required SSH key that you have added to the SSH key repository;
   • or click Add new key. Enter a key name and paste the public SSH key you created earlier. Click Add. The key will be added to the SSH key repository.

6. Click Install.

Place an SSH key on a dedicated server without reinstalling the OS

Without reinstalling the OS, a public SSH key can only be placed on the server by copying the key from your local computer. The ssh-copy-id command adds the public SSH key to the end of the ~/.ssh/authorized_keys file. The command creates the directory and the file if they do not exist yet.

From Linux/macOS

1. Open the CLI on your local computer.

2. Copy the public SSH key to the server:

   ssh-copy-id -i <path> <username>@<ip_address>

   Specify:

   • <path> — the full path to the public key on your local computer, for example ~/.ssh/id_rsa.pub;
   • <username> — the username;
   • <ip_address> — the server's public IP address.

3. Enter the user password.

From Windows

1. Open cmd on your local computer.

2. Copy the public SSH key to the server:

   scp <local_path> <username>@<ip_address>:<server_path>

   Specify:

   • <local_path> — the full path to the public key on your local computer;
   • <username> — the username;
   • <ip_address> — the server's public IP address;
   • <server_path> — the path for storing the public key on the server, for example C:\Users\username\.ssh\authorized_keys.