Titan SSH Host Keys

Titan SSH Host Keys

Titan FTP Server can use Secure File Transfer Protocol (SFTP), a Host Key Authentication method which adds Secure Shell (SSH) protection to your data transfers. This is Public Key Infrastructure (PKI), which is the use of a key pair made up of a public and private key to encrypt data. The public key can be disseminated by the key pair owner, and any recipient can use it to encrypt data. That data can then only be decrypted by the matching private key the owner keeps secret.


Both the client and server using SFTP should generate a separate host key pair and exchange public keys. Both parties can then send encrypted data that can only be decrypted by the intended recipient.The client host key pair should be exported and sent to the Titan Administrator in .pub format. Titan will import it into the Host Key storage.


While it is possible to use the Host Key Management features in Titan FTP to create user host key pairs for your clients, it is highly discouraged. It’s difficult to ensure the integrity of the transfer from the server computer to the client computer. If it is impossible to have clients create their own host keys, ensure your transfer is secure. Export the keys to an encrypted USB drive, or encrypt the files onto a DVD/CD ROM and physically hand deliver them to the client. Never email the host key files to the user. Email is natively unsecured; there is no way to ensure the integrity of the files during electronic transfer. Never share or send your private key to anyone; this will compromise the integrity of your host key pair. It’s good practice to password protect your private key as well, and Titan FTP Server requires this.


Note that Titan FTP Server can only read OpenSSH format keys.


For more in-depth information on creating and configuring an SFTP server or creating, importing, and assigning host keys, see our PDF Guide: https://southrivertech.com/wp-content/uploads/qs_Titan_HostKeys.pdf


    • Related Articles

    • SSH Host Keys unavailable with NT Authentication

      When using the Windows NT/SAM or Windows ADSI Authentication connectors in Titan FTP Server 2019 or Cornerstone MFT Server 2019, you may notice that the Public Host Key feature of SFTP/SSH is not available for use. User Authentication Settings ...
    • Cornerstone SSH Host Keys

      Cornerstone MFT Server can use Secure File Transfer Protocol (SFTP), a Host Key Authentication method which adds Secure Shell (SSH) protection to your data transfers. This is Public Key Infrastructure (PKI), which is the use of a key pair made up of ...
    • 2019: How-To: Updating Titan FTP Server to the latest version

      Updating existing Titan FTP Server software to the most current version is the best way to ensure the security of your user's data. While outdated versions of Titan FTP Server should work indefinitely, security standards change and OS manufacturers ...
    • Error 1610 while importing SSHKEYGEN host keys in Cornerstone for SFTP

      If you receive the following error when you are trying to import SSH-KEYGEN host key pairs into Cornerstone/Titan Server: 'Unable to import host key due to invalid format or bad password. Make sure the SSH key is OpenSSH format (Error 1610)', there ...
    • 2019: Titan FTP Server Release Notes

      Important Information Titan FTP Server must be installed under an account that has full administrative rights to the computer on which the software is being installed.  To uninstall Titan FTP Server, use the Add/Remove Programs feature of the Windows ...