Before you can either connect to your Git code repository or use SSH to sign in to your web infrastructure, you must have an SSH private/public key pair. Use the information on this page to help you create a key pair for your use.

Public key requirements

Cloud Platform requires that your SSH public key is at least 4,096 bits in size.

All websites requiring Payment Card Industry Data Security Standard (PCI DSS) compliance must be in an Acquia PCI DSS-compliant product offering. To meet PCI DSS requirements, all users must use multi-factor authentication for remote access to their PCI DSS environment. When you connect to a Cloud Platform environment using SSH, you use your SSH key as one authentication factor. To provide a second authentication factor, you must use a passphrase with your SSH key, which you can add when you create your SSH key pair. For more information about PCI compliance with Cloud Platform, see Compliance with standards and regulations.

Creating a private/public key pair

To generate an SSH private/public key pair for your use, you can use the ssh-keygen command-line utility.

You can run the ssh-keygen command from the command line to generate an SSH private/public key pair.

To generate an SSH private/public key pair using the ssh-keygen command and then copy the public key to your clipboard for use:

1. On your local computer, open a command-prompt window.

2. Ensure you do not already have a public key saved to your computer. To determine if you already have a saved public key run the following command:

   copy

   cd ~/.ssh; ls -l

   If the directory and key file exist, run the following commands to back up the key id_rsa, as the procedure will overwrite any key named id_rsa in this directory:

   copy

   mkdir key_backup
   mv id_rsa* key_backup

3. Run the following command to generate a new public/private key pair:

   copy

   ssh-keygen -b 4096 -t rsa

   Note

   If you are generating this key pair for Pipelines, you might need to use the ssh-keygen command found in the workaround of this known issue.

   The ssh-keygen command prompts you for the directory to contain the key.

   copy

   Generating public/private rsa key pair. Enter file in which to save the key (/Users/[user_dir]/.ssh/id_rsa):

4. Press Enter to accept the default location of /.ssh/id_rsa in your user directory.

After you generate your key pair, you can add your new public key to your Acquia user profile in Cloud Platform.

Related topics

Getting started with SSH

Generating an SSH public key