Can I move the private key from one server to another?

From: John Reese (john_reese_at_fin-rec.com)
Date: 03/08/05

  • Next message: dsmcd: "SSH newbie" 
    Date: Tue, 08 Mar 2005 16:38:43 -0600

    We need to replace a Redhat 7.2 server with a RH9 box. Hundreds of SSH
    clients connect to the old machine. The new machine will have the same IP
    address, but it will generate a different private key at startup and
    clients will reject it.

    The obvious answer is to delete the old public key from the known_hosts
    file on each client. Given the number of clients and remote locations,
    this is impractical.

    Is there any way to transport the old private key from the old machine to
    the new machine? This must have come up before somewhere!

    Any help appreciated.

    John Reese
    john_reese@fin-rec.com

  • Next message: dsmcd: "SSH newbie"

    Relevant Pages

    • Re: Key Management
      ... that can be built into ssh to manage keys. ... > the private key, is that it should never leave the user's hands. ... > definitely shouldn't be shared via any broadcast system such as LDAP or NIS ... all SSH clients could use them, we might come close to this (but even ...
      (comp.security.ssh)
    • ssh public key authentication
      ... I'm asking around is it possible to hijack clients rsa/dsa private key if ssh-daemon is modified by someone who has evil means. ...
      (SSH)
    • Re: Is it possible to move private SSH keys to new server?
      ... Since the known_hosts file exists on the clients, ... modify every machine in the company -- a huge task, ... there is some way we could simply transfer the private key from one server ... >> the SSH directory with all the proper ownership and permissions. ...
      (linux.redhat)
    • client certificates and private keys.
      ... I will be writting a web application that will accept certificates from ... What I really need is to get the private key from the client ... Clients that do not have the ... private key will not encrypted data. ...
      (microsoft.public.dotnet.framework)
    • RE: Commentary on the seven words
      ... When I was an operating systems programmer we all too often forgot that the Operating system existed to support the application, not the other way around. ... A Because the application that we run uses a telnet client that doesn't support ssh - and that's why I can't run ssh on this system. ... I administrate one system that has 128 clients on it and it's ...
      (RedHat)