...
During the configuration of your instance you should have created a security group allowing at the minimum SSH access to the instance. If this has been done correctly, you can use SSH from the command-line or from a tool such as PuTTY to access the command-line of the charon sshuser user on the Charon-SSP instance. If you select your instance in the instance list and then click on Connect, you will see the instructions for connecting via SSH.
...
To connect to the instance as the user charon sshuser, use the following command:
$ ssh -o ServerAliveInterval=30 -i <path-to-your-private key> |
charon@ sshuser@<AWS-public-IP-address> |
The parameter ServerAliveInterval will protect the connection from timing out.
...
| Code Block |
|---|
|
$ ssh -o ServerAliveInterval=30 -i ./we-test-key2.pem charon@3sshuser@3.81.64.139
Last login: Tue May 21 05:34:33 2019 from myhost.example.com
[charon@ipsshuser@ip-172-31-38-252 ~]$ pwd
/home/charon
|
...
The SSH security group definition is also used to allow SFTP access to the Charon-SSP AWS instance. This allows file transfers to and from the Charon-SSP AWS instance. The user for file transfers is the storage charon user.
To connect to the instance as the user storage charon, use the following command:
$ sftp -i <path-to-your-private-key> |
storage@ charon@<AWS-public-IP-address> |
Below you see sample output of a connection:
| Code Block |
|---|
|
$ sftp -i ./we-test-key2.pem storage@3charon@3.81.64.139
Connected to storage@3.81.64.139.
sftp> pwd
Remote working directory: /
sftp> ls
storage ls
media ssp-snapshot |
| Excerpt |
|---|
Connecting with the Charon-SSP ManagerTo manage Charon-SSP and the emulated SPARC systems, you must connect to the Charon-SSP AWS instance with the Charon-SSP Manager. The Charon-SSP Manager is the main interface to all important functions of the Charon-SSP software. Prerequisites: - The Charon-SSP Manager must be installed on your local system.
- For access via the public IP address of the instance:
- The Security Group on your local system must at least allow SSH access. This allows the built-in SSH tunneling of the Charon-SSP Manger to work. Should you not use SSH tunneling, you must open up additional ports (9091 for the Manager communication, any ports used for the emulated system serial console ports, and ports used for the graphical emulation). However, if the connection runs over the Internet, Stromasys recommends strongly to use SSH tunneling. Otherwise, your Charon-SSP cloud instance and any emulated systems running on it can easily be compromised.The public key installed in
.ssh/authorized_keys of the charon user of the Charon-SSP AWS instance must be copied to the local system. The Charon-SSP Manager needs this key to set up SSH tunneling. - Public IP address of the Charon-SSP AWS instance.
- For access via an SSH-based VPN:
Copying the Public Key to the Local System Required if the integrated SSH tunnel of Charon Manager is to be used.
If not yet done, the public key of the key-pair associated with the Charon-SSP AWS instance must be copied to your local system. To copy the Charon-SSP AWS public key to the local system, perform the following steps: |
| Step | Detail / Command |
|---|
| Use SSH to login to your Charon-SSP instance from your local system. | $ ssh -o ServerAliveInterval=30 -i <path-to-your-private key> charon@<AWS-public-IP-address> |
On the Charon-SSP host: display the public key and copy the content. | $ cat ~/.ssh/authorized_keys
Copy the content into the paste-buffer.| On your local system: paste the content into a file. | $ echo "<content-of-paste-buffer>" >> <keyname>.pub |
Start the Charon-SSP Manager
Start the Charon-SSP Manager using the following command:
$ /opt/charon-manager/ssp-manager/ssp-manager |
This will open the login window of the Charon-SSP Manager.
| Login tab of the login window: | SSH tab of the login window: |
 Image Modified
| Image Modified |
On this tab perform the following steps: |
enter - Enter the public IP address or the private VPN IP address of your Charon-SSP instance
|
,enter - Enter the Charon-SSP management password (default: stromasys)
|
, and enable - Enable the SSH tunnel configuration unless you use a connection across a secure VPN.
| If using the Manager's integrated SSH tunnel: On this tab perform the following steps: |
enter - Enter the Charon-SSP user (
|
charon,enter - Enter the path to the private
|
and public files - file (click on the three dots to open a file browser),
|
enter - In rare cases, you may need to add the path to the public key on the local system.
- Enter the passphrase for the private key if required
|
, andadjust - Adjust the server port (default 22) if required.
The public key of the AWS keypair can copied from the .ssh/authorized_keys file of the sshuser of the instance |
| After entering all the required information, click on Connect to connect to the Charon-SSP AWS instance. |
If the information is correct, the Charon-SSP Manager welcome screen will be displayed:
...