Users need to generate SSH keys in order to use the SFTP integration service. The technical requirement of those keys are as follows:

• RFC 4716 formatted public keys

  • On Windows, this is the default format that is generated by Putty-Gen

  • On Linux/Mac OS/Windows (with WSL), OpenSSH generated keys can be converted to this format with the command ssh-keygen -e -f $PATH_TO_PUBLIC_KEY

• RSA or ECDSA algorithm

  • RSA keys need to be >= 2048 bits

  • ECDSA keys need to be >= 256 bits

  • DSA and Ed25519 keys are explicitly not supported

Correctly formatted public keys look like this:

---- BEGIN SSH2 PUBLIC KEY ----
Comment: "2048-bit RSA, converted by reilly@w17-8r8qgk2 from OpenSSH"
AAAAB3NzaC1yc2EAAAADAQABAAABAQDC1PCagifx9YP53Ql7sxG4TCnRCKMhe5V+ZLZAI4
iEHwt+VVy5Q6tMU2BI4wZOgBM4f8Ft7SrIWb12MaMtO4UTSTcUGKu4uWX26mKiDX/QjJsA
g3NBymB0GqXaSQ4ygHXggVtjRPULYE0Jdp2FkNxUTIL9XrDZS1HphKLQ4G/FvsuukzHP0D
Cjxx2RUeClTw0I+F7IVzJDwEiU1KxskZT8kuFG3EY40VKeex9JCfKP/zoj4/FQVAxwerdK
WKuvb5aihyqRbNr8L+Oa7wWC1L5aq+/mAT1CMSst5iuF6pepLcN6zJVwcrJeK32PYMucKH
kuESqv248Yih4qOAYWUb8p
---- END SSH2 PUBLIC KEY ----

Note the PUBLIC in the first line. Please be aware that Experiential Learning Cloud never needs to see the private portion of the key and if one is mistakenly sent to us we will be unable to use it and will need to disable the keys access to our system.