How do I convert my Amazon Elastic Compute Cloud (Amazon EC2) Privacy Enhanced Mail (.pem) file to a PuTTY Private Key (.ppk) file? Or, convert a .ppk file to a .pem file?
Short Description
PuTTY doesn't natively support the private key format (.pem) generated by Amazon EC2. You must convert your private key into a .ppk file before you can connect to your instance using PuTTY. You can use the PuTTYgen tool for this conversion. This tool, available for both Windows and Unix operating system, can convert keys.
When I try to create a ssh key pair using ssh-keygen -t rsa -b 4096 -C 'youremail@example.com' it creates a public key idrsa.pub and a private key idrsa. But this file does not have a.ppk extension. How can we generate a.pub and.ppk file? I can also use puttygen but on the puttygen UI where do I. You can convert your Putty private keys (.ppk) to base64 files for OpenSSH or OpenSSL. With puttygen on Linux/BSD/Unix-like. If you are using the unix cli tool, run the following command: puttygen my.ppk -O private-openssh -o my.key. You can also generate a public key for your SSH servers using one of the two following commands based on your. PuTTYgen, part of the open source network networking client PuTTY, is a crucial generating tool to create public and private SSH keys for servers. The native file format of PuTTY is.ppk files. Additionally, the tool is used for SSH connectivity. So users can use PuTTY to connect and securely transfer data from localhost to remote system.
Resolution
Windows - install PuTTYgen
Most Windows operating systems have PuTTY installed. If your system doesn't, download and install PuTTYgen.
Windows - convert a .pem file to a .ppk file
Start PuTTYgen, and then convert the .pem file to a .ppk file. For detailed steps, see Convert Your Private Key Using PuTTYgen.
Windows - convert a .ppk file to a .pem file
- Start PuTTYgen. For Actions, choose Load, and then navigate to your .ppk file.
- Choose the .ppk file, and then choose Open.
- (Optional) For Key passphrase, enter a passphrase. For Confirm passphrase, re-enter your passphrase.
Note: Although a passphrase isn't required, you should specify one as a security measure to protect the private key from unauthorized use. Using a passphrase makes automation difficult, because human intervention is needed to log in to an instance or to copy files to an instance. - From the menu at the top of the PuTTY Key Generator, choose Conversions, Export OpenSSH Key.
Note: If you didn't enter a passphrase, you receive a PuTTYgen warning. Choose Yes. - Name the file and add the .pem extension.
- Choose Save.
Unix or Linux - install PuTTY
Install PuTTY, if it's not already on your system.
Important: A PuTTY package is provided by the Extra Packages for Enterprise Linux (EPEL) repository. You must enable the EPEL repository before you install PuTTY.
To install PuTTY, run one of the following commands:
RPM-based
Dpkg-based
Unix or Linux - convert a .pem file to a .ppk file
On the instance shell, run the puttygen command to convert your .pem file to a .ppk file:
Unix or Linux - convert a .ppk file to a .pem file
Run the puttygen command to convert a .ppk file into a .pem file:
Related Information
Anything we could improve?
Need more help?
Related Videos
PuTTYgen, part of the open source network networking client PuTTY, is a crucial generating tool to create public and private SSH keys for servers. The native file format of PuTTY is .ppk files. Additionally, the tool is used for SSH connectivity. So users can use PuTTY to connect and securely transfer data from localhost to remote system.
But to use PuTTY, the private keys must be in the native format of the application. So for example, as Amazon Elastic Compute Cloud (EC2), a core part of the cloud-computing platform, generates Privacy-Enhanced Mail (PEM) file format, a user must first convert the file to .ppk file format before connecting to Linux Instance (virtual server on Amazon Web Services) from a Windows machine.
The EC2 allows users to lease virtual systems so that they can run their applications on it.
However if one plans to use PuTTY’s SSH client to connect, then they are first required to convert the .pem file to .ppk using PuTTYgen and then use PuTTY application to join local and remote hosts.
- 4 Converting .Pem to .Ppk on Unix or Linux
What Is the .Pem File Format?
Privacy-Enhanced Mail (PEM) file extension is a format that is mainly used to transmit data, certificates, email and cryptographic keys privately. The PEM file format is a tamperproof and secure way of storing and transferring data.
Putty Generate Ppk From Private Key Code
As a ‘.pem file’ can store multiple types of data; it represents data with appropriate suffix. While the most common is .pem suffix, others include .key for private keys and .cer or .crt for certificates. The PEM file format encodes it with the binary-to-text encoding scheme – base64 so that it represents binary data in ASCII string.
Even though the technological advancements have led to a more secure alternative to PEM container, it is still leveraged to store public and private certificates, root certificates and many others.
Unlike most file formats that are easy to convert via online conversion tools, a user requires a specific application to convert files that have .pem extensions. PuTTYgen is one such application that quickly converts f .pem files to .ppk.
Convert .Pem to .Ppk using PuTTYgen
Putty Generate Ppk From Public Key
The primary requisite is to download and install PuTTY application. As part of the networking client, PuTTYgen does not have to be downloaded separately. Users must download the latest version of the app and install the entire suite. Once installed, PuTTYgen will be ready to convert .pem files to .ppk format. We will provide detail steps to convert files on both operating systems – Windows and Unix.
Converting .Pem to .Ppk on Windows
- Click on Start menu> All Programs > PuTTY > PuTTYgen.
- The following window will present with options on the crucial a user wants to generate. Select the option ‘RSA (Rivest–Shamir–Adleman). RSA is a public-key cryptosystem that is commonly used to transmit data securely. Users with an older version of PuTTY should select the option – ‘SSH-2 RSA.’
- Next, click on the option ‘Load.’ As PuTTY supports its native file format, it will only show files that have .ppk file extension. Therefore, users have to choose the ‘All Files’ option from the drop-down bar. It will display all key files included the .pem file.
- Now, select the .pem file that you want to convert. As aforementioned that PuTTYgen is used for SSH connectivity, so it crucial for users to select the specific file that they plan to convert and click ‘Open.’ To confirm, click on ‘OK.’
- In the resultant window, click on ‘Save private key’ which will convert and save the key file in PuTTY compatible format.
- PuTTYgen will prompt a warning of saving the key without a passphrase. Hit ‘Yes’ on it.
- Now, give the name to your file and PuTTYgen will automatically add .ppk file extension.
Note – Passphrases provide extra protection, but it sometimes gets annoying as each time a user copies files they have to enter the passphrase. Although, it entirely depends on the user if they wish or don’t wish to add the extra layer of protection
Once the file is converted to PuTTY compatible format, users can connect their local machine with remote servers.
Converting .Pem to .Ppk on Unix or Linux
To convert the file on Unix is far simpler than Windows. Users are first required to install PuTTY application on their Unix machines. Once done, all a user must do is enter a one-line command. First, run the PuTTYgen command and type the below-written command:
$ sudo puttygen pemKey.pem -o ppkKey.ppk -O private
Voila! The .pem files will quickly be converted to PuTTY native file format. Users can connect via PuTTY to remote servers from local systems using the newly created .ppk files on both Windows and Unix.
Connect Using PuTTY
Once the .pem file is converted .ppk then users can connect to remote hosts using PuTTY’s SSH client. Below are steps to launch a PuTTY session.
- First, open PuTTY and input the host IP address. Please note that an SSL VPN connection must be established if the connection is to with 10.X private address.
- Now, from the category pane, navigate to Connection and expand SSH and the Auth.
- Click on ‘Browse’ and select the newly converted .ppk file, that was generated using PuTTYgen.
- Now to commence the PuTTY session, choose the option ‘open.’
Note: If the remote and local hosts connect for the first time using PuTTY then the application will pop up a dialog box confirming the authenticity of the connection. It just provides an added layer of security, so click ‘Yes’ when it appears.
Transferring Files Using PuTTY
Interestingly, one can also use PuTTY applications another component the PuTTY Secure Copy client (PSCP) to transfer files to remote servers. The PSCP is a Secure copy protocol (SCP) client that enables secure transfer of files from localhost to remote hosts.
If users are not comfortable using the command-line tool they can choose another Graphic user interface-based SCP client. One of the notable is WinSCP – an open-source multi-protocol supportive application for Microsoft Windows.
Back to PSCP, users are required to use the private key they generated while converting the .pem file to the .ppk file.
Converting a .pem file to a .ppk using PuTTYgen may now seem simple. The above information also briefs users on using PuTTY’s SSH client to connect virtual servers with local machines.