Changes for page SFTP Known Hosts

Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -11,9 +11,9 @@
11	11
12	12	== 2. Key concepts ==
13	13
14		-This microlearning is about SFTP security.
	14	+This microlearning is about SFTP known host files.
15	15
16		-By SFTP security, we mean: Making sure that the SFTP we connect to knows that we are indeed eMagiz
	16	+By SFTP known hosts, we mean: Making sure that we are certain that we connect to the correct SFTP to prevent data theft as a result of a "man in the middle" attack.
17	17
18	18	* Each SFTP has a unique fingerprint that identifies the SFTP.
19	19	* To prevent a "man in the middle" attack, this fingerprint needs to be stored client side.
...	...	@@ -27,6 +27,8 @@
27	27
28	28	=== 3.1 Known Hosts File Generation - Portal ===
29	29
	30	+To configure the preferred option we start at the flow level in Create.
	31	+
30	30	=== 3.2 Known Hosts File Generation - Command Line ===
31	31
32	32	The secondary option, when there are IP restrictions, provides you with the option to execute several commands after gaining access to the correct server to generate the known hosts file. These steps are detailed below.
...	...	@@ -41,31 +41,17 @@
41	41	* Define a property for the known hosts field in the SFTP (caching) session factory.
42	42	** Provide a value for the property upon deploying the release that follows the following structure: {{code}}classpath:emagiz-resources/[filename]{{/code}}
43	43
44		-If you are looking for some introductory reading into certificates, please check this [[microlearning>>doc:Main.eMagiz Academy.Microlearnings.Novice.Securing Data Traffic.novice-securing-your-data-traffic-what-are-certificates.WebHome||target="blank"]].
45		-
46		-As the private key is yours, you can ask a trusted party to generate the key, or you could create it yourself. The latter part happens a lot when connecting to an SFTP. You could use a tool like PuttyGen to achieve this. As a result, you will have a keypair. The private key should be kept safely with you in eMagiz, and you need to share the public key with the SFTP server party. In this microlearning, I will not explain how PuttyGen works in detail. Instead, we will focus on the part in eMagiz. In eMagiz, we need to refer to the key file (linked under Resources), and we need to refer to the password we use to save our key file securely.
47		-
48		-[[image:Main.Images.Microlearning.WebHome@intermediate-file-based-connectivity-sftp-security--private-key-config.png]]
49		-
50		-Note that the use of a password and a private key are mutually exclusive. So you need to either provide a password or a private key for authentication. In the help text provided by eMagiz, you can see how the reference to the key file should be made.
51		-
52		-When you have configured these settings, you have finished the configuration in eMagiz. Now you could test whether the configuration is set up correctly between eMagiz and the SFTP. If this is not the case, eMagiz will notify you via the Manage phase, either as an error message or a log entry.
53		-
54		-Using this setting gives the server the option to verify if the communication request came from eMagiz (or at least from the party that holds the private key of eMagiz). This is an additional security measure to ensure data integrity and quality.
55		-
56	56	== 4. Key takeaways ==
57	57
58		-* Private key is unique per client
59		-* Private key should only be known to the client
60		-* Public key should be known to the SFTP (server), so they trust us when we set up the communication
61		-* A private key comes with a passphrase
	48	+* Each SFTP has a unique fingerprint that identifies the SFTP.
	49	+* To prevent a "man in the middle" attack, this fingerprint needs to be stored client side.
	50	+* There are two distinct methods to generate the known hosts file.
62	62
63	63	== 5. Suggested Additional Readings ==
64	64
65	65	If you are interested in this topic and want more information, please read the release notes provided by eMagiz. Furthermore, check out these links:
66	66
67		-* [[SFTP Outbound>>https://docs.spring.io/spring-integration/docs/2.2.6.RELEASE/reference/html/sftp.html#sftp-outbound||target="blank"]]
	56	+* [[Known Hosts Files explained>>https://stackoverflow.com/questions/33243393/what-is-actually-in-known-hosts||target="blank"]]
68	68	* [[SFTP Session Factory>>https://docs.spring.io/spring-integration/docs/2.2.6.RELEASE/reference/html/sftp.html#sftp-session-factory||target="blank"]]
69		-* [[SFTP Authentication>>https://www.2brightsparks.com/resources/articles/sftp-authentication.html||target="blank"]]
70	70
71	71	)))((({{toc/}}))){{/container}}{{/container}}