Window Server 2012 - SFTP

First of all you need to download this application,
Openssh

Extract the package to C:\openssh
powershell.exe -ExecutionPolicy Bypass -File install-sshd.ps1



Generate Server keys by running the following commands from c:\openssh
.\ssh-keygen.exe -A

Open a port for the SSH server in Windows Firewall:
New-NetFirewallRule -Protocol TCP -LocalPort 22 -Direction Inbound -Action Allow -DisplayName SSH

To allow a public key authentication, as an Administrator, from C:\openssh, run:
powershell.exe -ExecutionPolicy Bypass -File install-sshlsa.ps1 

Restart the Server

Locate this files C:\openssh\sshd_config and change it to 
Subsystem sftp C:\openssh\sftp-server.exe

Start the service and/or configure automatic start:

Go to Control Panel > System and Security > Administrative Tools and open Services. Locate SSHD service.

If you want the server to start automatically when your machine is started: Go to Action > Properties. 

In the Properties dialog, change Startup type to Automatic and confirm.

Start the SSHD service by clicking the Start the service.

C:\openssh>ssh-keygen.exe -l -f ssh_host_rsa_key -E md5

Connect to the SFTP Server using WINSCP

Comments

  1. Yashvardhan Meharotra3 August 2017 at 02:03

    Visit miditech India
    This is an amazing blog and full of informative contents. I am looking forward for more informative blogs.

    ReplyDelete
    Replies
    1. Wei Pin5 August 2017 at 05:37

      Thanks for the compliment, I will create more articles in the coming days

      Delete
  2. Wei Pin5 August 2017 at 05:36

    This comment has been removed by the author.

    ReplyDelete

Post a Comment

Popular posts from this blog

Window Server 2016 - Configuring Radius Server

Image
Add Roles and Features Wizard, Network Policy and Access Services Start Installation Manage > Network Policy Server Create New Radius Client Configuring Radius Server for 802.1X Wireless or Wired Connections Configuring profile name, Configure an Authentication Method, choose Microsoft: Protected EAP (PEAP) Leave the Groups column empty and click next until finish. Remember to Register server in Active Directory Click on OK Before proceed to authenticate Wireless Clients using 802.1X, we need to configure Active Directory Certificate Services
Read more

Window Server 2012 Hardening Checklist

Image
FILE SYSTEM Use of secure File System NTFS COMPUTER CONFIGURATION/WINDOWS SETTINGS/SECURITY SETTINGS /ACCOUNT POLICIES ACCOUNT LOCKOUT POLICY:Account lockout threshold 3 invalid logon attempts ACCOUNT LOCKOUT POLICY:Account lockout duration 30 minutes ACCOUNT LOCKOUT POLICY:Reset account lockout counter after 30 minutes PASSWORD POLICY: Enforce password history 6 passwords remembered PASSWORD POLICY: Maximum password age 90 days PASSWORD POLICY: Minimum password age 0 day PASSWORD POLICY: Minimum password length 8 characters PASSWORD POLICY: Password must meet complexity requirements Enabled PASSWORD POLICY: Store password using reversible encryption for all users in the domain Disabled Start > Run > gpmc.msc Default Domain Policy > Edit COMPUTER CONFIGURATION/WINDOWS SETTINGS/SECURITY SETTINGS /LOCAL POLICIES/USER RIGHTS ASSIGNMENT Force shutdown from a remote system Administrators
Read more

Networking "IT"

Networking "IT" VSTP Switches A# configure Switches A  (config)# spanning-tree Switches A  (config)# spanning-tree mode rstp Switches A  (config-if)# exit Switches A  (config)# exit Switches B > en Switches B # configure Switches B  (config)# spanning-tree Switches B  (config)# spanning-tree mode rstp Switches B  (config-if)# exit Switches B  (config)# exit Check the spanning tree status Switches x  # show spanning-tree Ethernet x/x Sample Here:  Download Here
Read more