Adding SSH credentials

Add SSH credentials to use for connecting to the target machines being managed by LCM.

Add SSH credentials to use for connecting to the target machines being managed by LCM.

The Login User and SSH Login options allow LCM to remotely log in to a machine over SSH using a password or private key. LCM requires superuser privileges to install software and manage configuration on a target machine. The Privileges Escalation options allow specifying SU or SUDO mechanisms to elevate privileges if necessary after the remote login.

Note: The data (cluster topology models, configuration profiles, credentials, repositories, job history, and so forth) for Lifecycle Manager is stored in the lcm.db database. Your organization is responsible for backing up the lcm.db database. You must also configure failover to mirror the lcm.db.

All passwords and private keys are encrypted and safely stored by Lifecycle Manager.

Procedure

  1. Click SSH Credentials > Add Credential.
    The Add Credential dialog appears.

  2. Enter a Name for the credential.
  3. Optional: Enter a Comment that describes the credential. Example: Superuser access to all nodes.
  4. Enter the name of the Login User.
  5. Select an SSH Login type:
    • Password: (Default) Enter the Login Password associated with the Login User.
    • Private Key: Paste the private key into SSH Private Key. If applicable, enter the SSH Unlock Passphrase.
  6. For Escalate Privileges, select an option to enter any necessary secondary credentials.
    • SU: Enter the SU to this user (optional to switch to another user's account; typically the default root) and SU password.
    • SUDO: (Default) Enter the SUDO to this user and SUDO password of the Login User.
    • None: The login user is root or otherwise has all privileges required to run LCM jobs, including the ability to install packages and start services; no additional SUDO or SU privileges are required beyond the SSH password or private key.
  7. Click Save.
    The newly defined SSH credential is listed on the SSH Credentials page along with edit and delete options.

What's next

Edit the cluster, datacenter, or node as appropriate to select the credential in the Clusters workspace.