How To: Configure ECDSA (nistp521) key-based authentication for Titan SFTP using WinSCP.
Question
How do I generate an ECDSA (nistp521) key using WinSCP and configure it for SFTP/SSH authentication in Titan?
Answer
This article explains how to generate an ECDSA (nistp521) key pair using WinSCP (PuTTYgen), import the key into the Titan Admin UI, associate it with a user, and then connect using WinSCP with key-based authentication.
Pre-requisites
Titan SFTP / MFT
WinScp
Steps
A. Generate ECDSA Key Pair using WinSCP (PuTTYgen)
- Open WinSCP.
- Go to Tools > Run PuTTYgen.

- In PuTTY Key Generator:
- Select ECDSA as the key type.
- Select curve nistp521.
- Click Generate and follow the instructions to generate the key.

- Save the Public Key.
- Save the Private Key.

B. Configure Key in Titan Admin UI
- Log in to the Titan Admin UI.
- Navigate to Domain > Server > Services > SFTP/SSH tab.

- Click Manage Host Key, then click Import.
- Set a New Key Name.
- Select Import from multiple files.
- Browse and select the Public Key file (from Step A-4).
- Click Add.

- Select the New Key Name from the SSH Server Host Key dropdown.
- Click Apply to save the changes.

- Navigate to Domain > Server > Users and select the target user.
- Click Edit > Edit User Services.

- Go to the SFTP/SSH tab.
- Select the New Key Name and Apply the changes.

C. Log in using WinSCP with Private Key
- Open WinSCP.
- Click New Site.
- Enter the Server IP, Port, and Username.
- Click Advanced > Authentication.
- Browse and select the Private Key file (from Step A-5).
- Click OK, then attempt to log in.
