Windows/SSH - Revision history

Kenneth: /* Config */

2026-02-16T23:24:23Z

Config

← Older revision		Revision as of 23:24, 16 February 2026
Line 40:		Line 40:
	C:\ProgramData\ssh		C:\ProgramData\ssh

	sshd_config:		C:\ProgramData\ssh\sshd_config ::
	AuthorizedKeysFile .ssh/authorized_keys		AuthorizedKeysFile .ssh/authorized_keys

Kenneth: /* Config */

2025-12-19T04:28:33Z

Config

← Older revision		Revision as of 04:28, 19 December 2025
Line 48:		Line 48:
	AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys		AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys
	</pre>		</pre>


			To fix this, comment out these "Matched" lines, then run:
			Restart-Service sshd

	=== SSH Keys ===		=== SSH Keys ===

Kenneth: /* Enable SSH */

2025-12-19T04:28:12Z

Enable SSH

← Older revision		Revision as of 04:28, 19 December 2025
Line 6:		Line 6:
	Start service (powershell): (is this step needed?)		Start service (powershell): (is this step needed?)
	Start-Service sshd		Start-Service sshd

			Stop-Service sshd

			Restart-Service sshd

	(Optional) Set SSH Service to Start Automatically:		(Optional) Set SSH Service to Start Automatically:

Kenneth: /* Config */

2025-12-19T04:24:04Z

Config

← Older revision		Revision as of 04:24, 19 December 2025
Line 39:		Line 39:
	AuthorizedKeysFile .ssh/authorized_keys		AuthorizedKeysFile .ssh/authorized_keys

			This line causes the user's .ssh/authorized_keys file to be ignored, if they are in the Administrators group:
	<pre>		<pre>
	Match Group administrators		Match Group administrators

Kenneth: /* Enable SSH */

2025-09-05T02:27:09Z

Enable SSH

← Older revision		Revision as of 02:27, 5 September 2025
Line 1:		Line 1:
	== Enable SSH ==		== Enable SSH ==

	~~How to SSH into Windows 10 or 11?~~
	~~https://gist.github.com/teocci/5a96568ab9bf93a592d7a1a237ebb6ea~~

	Install service (powershell):		Install service (powershell):
Line 9:		Line 6:
	Start service (powershell): (is this step needed?)		Start service (powershell): (is this step needed?)
	Start-Service sshd		Start-Service sshd

			(Optional) Set SSH Service to Start Automatically:
			Set-Service -Name sshd -StartupType 'Automatic'

			Verify Service:
			Get-Service sshd

	Enable Firewall Rule (powershell):		Enable Firewall Rule (powershell):
	New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22		New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22

			References:
			* How to SSH into Windows 10 or 11? - https://gist.github.com/teocci/5a96568ab9bf93a592d7a1a237ebb6ea
			* Setting Up SSH Server and Opening Port 22 on Windows \| by Liliane Konissi \| Medium - https://medium.com/@lilnya79/setting-up-ssh-server-and-opening-port-22-on-windows-ff9f324823b7

	== Chocolatey ==		== Chocolatey ==

Kenneth: /* Enable SSH */

2025-09-05T02:22:47Z

Enable SSH

← Older revision		Revision as of 02:22, 5 September 2025
Line 4:		Line 4:
	https://gist.github.com/teocci/5a96568ab9bf93a592d7a1a237ebb6ea		https://gist.github.com/teocci/5a96568ab9bf93a592d7a1a237ebb6ea

	~~Powershell~~:		Install service (powershell):
	Add-WindowsCapability -Online -Name OpenSSH.Server*		Add-WindowsCapability -Online -Name OpenSSH.Server*

	Enable Firewall Rule:		Start service (powershell): (is this step needed?)
			Start-Service sshd

			Enable Firewall Rule (powershell):
	New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22		New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22

Kenneth at 02:17, 5 September 2025

2025-09-05T02:17:08Z

← Older revision		Revision as of 02:17, 5 September 2025
Line 1:		Line 1:
			== Enable SSH ==

			How to SSH into Windows 10 or 11?
			https://gist.github.com/teocci/5a96568ab9bf93a592d7a1a237ebb6ea

			Powershell:
			Add-WindowsCapability -Online -Name OpenSSH.Server*

			Enable Firewall Rule:
			New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22

	== Chocolatey ==		== Chocolatey ==

Kenneth: /* SSH Keys */

2024-12-03T19:17:57Z

SSH Keys

← Older revision		Revision as of 19:17, 3 December 2024
Line 25:		Line 25:
	=== SSH Keys ===		=== SSH Keys ===

	~~Place the~~ keys in		For standard users:
			%USERPROFILE%/.ssh/authorized_keys

			For users who are administrators, they must put their keys in
	C:\ProgramData\ssh\administrators_authorized_keys		C:\ProgramData\ssh\administrators_authorized_keys

			%PROGRAMDATA%\ssh\administrators_authorized_keys
			%ALLUSERSPROFILE%\ssh\administrators_authorized_keys


	Fix the permissions with Powershell:		Fix the permissions with Powershell:

Kenneth at 17:50, 12 March 2021

2021-03-12T17:50:42Z

New page

== Chocolatey ==

<pre>
Set-ExecutionPolicy Bypass -Scope Process -Force
[System.Net.ServicePointManager]::SecurityProtocol = 3072
iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))

$env:chocolateyUseWindowsCompression = 'true'
choco install -y openssh -params '"/SSHServerFeature"'
</pre>

=== Config ===

C:\ProgramData\ssh

sshd_config:
AuthorizedKeysFile .ssh/authorized_keys

<pre>
Match Group administrators
AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys
</pre>

=== SSH Keys ===

Place the keys in
C:\ProgramData\ssh\administrators_authorized_keys

Fix the permissions with Powershell:
<pre>
$acl = Get-Acl C:\ProgramData\ssh\administrators_authorized_keys
$acl.SetAccessRuleProtection($true, $false)
$administratorsRule = New-Object system.security.accesscontrol.filesystemaccessrule("Administrators","FullControl","Allow")
$systemRule = New-Object system.security.accesscontrol.filesystemaccessrule("SYSTEM","FullControl","Allow")
$acl.SetAccessRule($administratorsRule)
$acl.SetAccessRule($systemRule)
$acl | Set-Acl
</pre>

ref: https://www.concurrency.com/blog/may-2019/key-based-authentication-for-openssh-on-windows

== Ansible ==

<pre>
- name: Install openssh
win_chocolatey:
name: openssh
package_params: /SSHServerFeature
state: present
tags: openssh
</pre>

ref: https://curiousdba.netlify.app/post/windowsopenssh/