60 Netra T2000 Server Administration Guide • September 2006
■ On the SC console:
Changing SSH Host Keys
It is good security practice to obtain new host keys periodically. If you suspect that
the host key might be compromised, you can use the ssh-keygen command to
regenerate system host keys.
Host keys, once generated, can only be replaced and not deleted without resorting to
the setdefaults command. For newly generated host keys to be activated, the SSH
server must be restarted either by running the restartssh command or through a
reboot. For further information on the ssh-keygen and restartssh commands
(with examples), see the Sun Fire Entry-Level Midrange System Controller Command
Reference Manual, 819-1268.
Note – You can also use the ssh-keygen command to display the host key
fingerprint on the system controller.
Additional Security Considerations
Special Key Sequences for RTOS Shell Access
Special key sequences can be issued to the SC, over its serial connection, while it is
booting. These key sequences have special capabilities if entered at the serial port
within the first 30 seconds after an SC reboot.
The special capabilities of these key sequences are automatically disabled 30 seconds
after the Sun copyright message is displayed. Once the capability is disabled, the key
sequences operate as normal control keys.
Because of the risk that the security of the SC could be compromised by
unauthorized access to the RTOS shell, you should control access to the serial ports
of the SC.
[0x89d1e0] sshdSessionServerCreate: no server registered
for showboards
[0x89d1e0] sshd: Failed to create sshdSession