[Windows] pem key permission 변경

 

TR;DR

Power Shell을 열고 pem가 있는 곳으로 이동.

icacls.exe .\*.pem  /reset
start-process "icacls.exe" -ArgumentList '.\*.pem /grant:r "$($env:USERNAME)":"(R)"'
icacls.exe .\*.pem /GRANT:R "$($env:USERNAME):(R)"
icacls.exe .\*.pem /inheritance:r

 

 

 

 

 

ssh 접속시 아래와 같은 ..화면을 보는 것도 흔한일이다.

 

WARNING: UNPROTECTED PRIVATE KEY FILE!

Bad permissions. Try removing permissions for user: NT AUTHORITY\\Authenticated Users (S-1-5-11) on file D:/Workspace/kani-lunit/lunit-ssh-config/keys/csg-sd-dev-key-pair.pem.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions for 'xxxxx.pem' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "xxxx.pem": bad permissions
ec2-user@xxxx: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

 

리눅스 혹은 MacOS의 경우

chmod 0600 *.pem

정도로 끝나지만 윈도우의 경우는 조금 복잡한듯.

 

 

Power Shell을 열고 pem가 있는 곳으로 이동.

icacls.exe .\*.pem  /reset
start-process "icacls.exe" -ArgumentList '.\*.pem /grant:r "$($env:USERNAME)":"(R)"'
icacls.exe .\*.pem /GRANT:R "$($env:USERNAME):(R)"
icacls.exe .\*.pem /inheritance:r

를 입력하자

 

끝!