Importing Keys 🚀

To import an existing public key, go to Setup → Trust Stores select the cluster in the Cluster dropdown menu.

1. On the Keys tab, click the IMPORT button.

2. In the Import Key window, click the UPLOAD button and browse the file system to locate the file.

3. Click the Open button to load the file.

4. In the Type drop-down list, select the TYPE (*) of the key you are importing choosing either PKHOST or PKUSR.

   1. If you select PKHOST, configure the FORMAT (*) choosing one of these options: - Automatic encoding detection - OpenSSH public key file - Secure Shell (SSH) Public Key File

   2. If you select PKUSR, configure: - USER: select a user registered in Data Mover, this is not a mandatory field (value: none). - FORMAT (*) choosing one of these options: - Automatic encoding detection - OpenSSH public key file - Secure Shell (SSH) Public Key File

5. Press Confirm.

As an alternative, you can import the SSH Keys in the pkhost repository using the /steng/bin/certedit.sh command line utility.

Example:

root@steng-p1:/steng/bin# ./certedit.sh import --in /tmp/dataone-new-server-key.pub -d pkhost -f 9  
Importing content into database pkhost  
File [/tmp/dataone-new-server-key.pub] successfully imported into [pkhost] with handle [13]

To display the newly imported key in the Trust Store > Keys tab, click the SYNC button.

🚀 Multiple SSH keys can be imported for the same server. They will be listed in the Keys list with unique names. See the Trust Store page for details.

Important note! Each SSH key can be imported for only one server address.