Update Default Ssh/Sftp Keys - ABB XRC G5 User Manual

9.7.3

Update default SSH/SFTP keys

ABB Totalflow generates default keys, but customers must generate their own private keys for
security. Updating the private key requires the update of the corresponding public key stored on the
XSeries G5 device. This procedure describes how to regenerate a private key and update its
corresponding public key on the device.
IMPORTANT NOTE: This procedure should be performed by an authorized expert user.
Failure to follow the procedure in its entirety will lock access to the SSH/SFTP service. This
procedure requires developer or tech-support access. To obtain default keys for this type of
access, call ABB Customer Support (see the last page of this manual.)
9.7.3.1 Update requirements
Key update requires third-party software. Two commonly-used products and a link to their download
sites is provided.
Obtain the following before update:
 Third-party software to generate new keys such as
putty package or as a standalone utility.
 Third-party SFTP client software to establish SFTP connections with the device (Filezilla).
 Latest PCCU from ABB. Download PCCU from www.abb.com/upstream.
 The private keys for developer or tech support accounts along with their respective
passphrases for SFTP. If changing the keys for the first time, request the default keys from
ABB. If the keys have been previously updated, use those keys instead.
IMPORTANT NOTE: There are other options for the third-party software. Puttygen and
Filezilla are used as examples to illustrate the update procedure. If using other software, the
update procedure is similar.
9.7.3.2 Generate private-public key pair
This procedure generates and saves a new private-public key pair. The private key, passphrase and
public key are stored safely on the user's laptop or PC. The public key must be saved also in the
XSeries G5 device. The new private key and its passphrase are required to access accounts after its
corresponding public key is updated on the device.
IMPORTANT NOTE: If default public keys are replaced on the device, default private keys
will no longer work. Make sure all newly generated keys and their passphrases are stored in
a safe location.
To generate new keys:
Download and install the latest version of Puttygen from the link provided in section
9.7.3.1, Update
Launch the Puttygen application. In the Puttygen Key Generator window make sure that
the "Type of key to generate" is set to SSH-2 RSA and "Number of bits in a generated key"
is set to 2048. Click Generate.
8 8 | XSE RI ES G5 | 2 10 6 02 6MNAA
requirements.
Puttygen. Download Puttygen as part of a