Skip to content

SSH OpenSSH

Guide to Using OpenSSH with PKCS11

Secure Shell (SSH) is a cryptographic network protocol for securely operating network services over an unsecured network. The most well-known application example is for remote user login to computer systems.

SSH provides a secure channel over an insecure network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH.

OpenSSH is a remote access tool that uses the SSH protocol. Installation instructions for Windows can be found here.

Environment configuration

  1. Install the HSM client (minimum version 4.7.10). This can be downloaded.

  2. Configure PKCS11 using DINAMOcon.

  3. To use OpenSSH, you need to configure the user/password and ip in the PKCS11 tab of DINAMOcon's Local Configuration. After opening DINAMOcon, click on Environment Configuration and then on the PKCS11 menu. Fill in the fields and apply the configuration.

    PKCS#11 tab PKCS#11 tab
    PKCS#11 tab

  4. Certificates in the HSM need to have an association with the key; if it hasn't been imported by DINAMOcon, you may need to create this association. The key and the certificate also need to be named correctly, with the certificate having the same name as the key with a __cer_ postfix. To create the association, simply open the certificate table by going to Certificates on the home screen and then clicking on the Certificates menu.

    Table of certificates Table of certificates
    Table of certificates

Using OpenSSH

To use OpenSSH, simply open a prompt and use the command:

ssh -I c:\diretorio_da_biblioteca\tacndp11.dll

By default the library is installed in the path:

C:\Program Files\Dinamo Networks\HSM Dinamo\sdk\c