2.3.3 Set up Secure Shell Connections

Secure Shell connections are available for VT terminal sessions and to configure SFTP transfers using the FTP Client.

By default, Secure Shell connections use public key authentication for the host and username/password authentication for the user. If you configure non-default settings, they are saved for each host (or ssh configuration scheme) to the ssh configuration file. This file is used for all connections (VT sessions and the FTP Client). You can deploy these settings per-user or for all users of the system. These settings are not included in compound documents.

  • User-specific configuration: [PersonalFolder] The full path to the Documents folder for the current user. The default is C:\Users\username\Documents. \Micro Focus\Reflection\.ssh\config

  • Global configuration: [CommonAppDataFolder] The full path to application data for all users. The default is C:\ProgramData. \Micro Focus\Reflection\ssh_config

To configure a secure terminal session using Secure Shell (SSH)

  1. Open the Create New Document dialog box, select the VT Terminal template and click Create

  2. In the Create New dialog box, under Connection, select Secure Shell and click OK.

  3. Click OK.

To configure non-default Secure Shell settings

  1. Open a session that you have configured to use Secure Shell. Disconnect if you are connected.

  2. Open the Document Settings dialog box.

  3. Under Host Connection, click Set up Connection Security.

  4. In the Reflection Secure Shell Settings dialog box, configure any non-default settings and then click OK.

    When you click OK, changes to the default settings are saved in the Secure Shell configfile in [PersonalFolder] The full path to the Documents folder for the current user. The default is C:\Users\username\Documents. \Micro Focus\Reflection\.ssh

To configure username and password prompts to appear in the terminal window

  1. Open a session that you have configured to use Secure Shell. Disconnect if you are connected.

  2. Under Host Connection, click Configure Connection Settings.

  3. Under Connection Options, select Handle SSH user authentication in terminal window.

Known Hosts

Host authentication (performed with public key authentication) enables the Secure Shell client to reliably confirm the identity of the Secure Shell server. If the host public key is not installed on the client, the host fingerprint is displayed and users are prompted to contact the system administrator to verify the fingerprint. This confirmation prevents risk of a "man-in-the-middle" attack, in which another server poses as the host. If you select Always in response to this prompt, the host key is saved in a file called known_hosts, which is created in [PersonalFolder] The full path to the Documents folder for the current user. The default is C:\Users\username\Documents. \Micro Focus\Reflection\.ssh. After the host key is added, Micro Focus Reflection Desktop can authenticate the server without requiring user confirmation, and the unknown host prompt does not appear again.

To prevent end-users from seeing the unknown host message you can deploy a known hosts file per-user or for all users of the system. These settings are not included in compound documents

  • User-specific file: [PersonalFolder] The full path to the Documents folder for the current user. The default is C:\Users\username\Documents. \Micro Focus\Reflection\.ssh\known_hosts

  • Global file: [CommonAppDataFolder] The full path to application data for all users. The default is C:\ProgramData. \ Micro Focus\Reflection\ssh_known_hosts