Contents

Overview

During the configuration of your instance you should have created a security group allowing at the minimum SSH access to the instance. If this has been done correctly, you can use SSH from the command-line or from a tool such as PuTTY to access the command-line of the sshuser user on the Charon-SSP instance. If you select your instance in the instance list and then click on Connect, you will see the instructions for connecting via SSH.

As shown in the image below, you will see in particular

• the name of the private key that must be used to connect to the instance, and
• the public DNS name of the instance.

 Note that the file permissions of the private key file must be set such that the file is only readable by the user. In the sample output above, the permissions are set to 400. This means that the only access is read-access by the user.

General Login Steps

To connect to the instance interactively, you must connect as the user sshuser. Use the following command:

The parameter ServerAliveInterval will protect the connection from timing out.

Below, you see sample output of a login:

$ ssh -o ServerAliveInterval=30 -i ./we-test-key2.pem sshuser@3.81.64.139
Last login: Tue May 21 05:34:33 2019 from myhost.example.com
[sshuser@ip-172-31-38-252 ~]$ pwd
/home/sshuser

 Note that this account allows root access to a limited subset of commands (use sudo -i). In particular, commands that are required to create more complex network configurations are allowed.

Setting the Management Password

 Before connecting to the Charon-SSW AWS host with the Charon Manager for the first time after the initial installation of your instance you must set the management password.  
This can either be done via the Charon Manager itself (see Connecting with the Charon-SSP Manager) or via the command line as shown below.

Steps to set the management password:

• Log in to the Charon host using SSH as show above.
• Become the root user (sudo -i).
• Change to the Charon Agent utilities directory (cd /opt/charon-agent/ssp-agent/utils).
• Run the charon-password script (./charon-passwd).
• Enter and confirm the new management password when prompted.

After this has been completed, you can connect to the host using the Charon Manager with the new management password.

Below, you see sample output of the steps:

$ ssh -i .ssh/mykey.pem  sshuser@3.86.14.26
[sshuser@ip-172-31-35-32 ~]$ sudo -i
[root@ip-172-31-35-32 ~]# cd /opt/charon-agent/ssp-agent/utils
[root@ip-172-31-35-32 utils]# ./charon-passwd
Enter new Charon password:
Retype new Charon password:
Password updated successfully.
Changing password for user charon.
passwd: all authentication tokens updated successfully.
Changing password for user sshuser.
passwd: all authentication tokens updated successfully.
sh: /home/charon/.vnc/passwd: No such file or directory
[root@ip-172-31-35-32 utils]#