Create an SSH key in the browser

Make a key pair in TIR itself, as an alternative to ssh-keygen on your computer. Your browser makes the pair, so TIR never sees the private key: you download it and keep it.

Create the key

1. In TIR, open the account menu at the top right and select SSH Keys, then open the Add Key menu and select Add new key. You can also reach the same form from the SSH Keys field when you create a resource.
2. In Key name, type a name you will recognize. Type it before you generate the pair: the name goes into the public key as its comment and into the name of the downloaded file.
3. Select Generate key pair, then choose one:
   • Generate pair without passphrase makes the pair at once.
   • Generate pair with passphrase asks for a Passphrase; type it and select Generate. The passphrase protects the private key, and you need it every time you use the key.
4. TIR generates the pair: an RSA key of 4096 bits. The public key is filled in and can no longer be edited, and the private key is below it, hidden.
5. To save the private key, select Download .pem file. The file takes its name from your key name, for example my-key.pem. Copy private key and Copy public key are there too. TIR does not store your private key, so save it now.
6. Select Add Key at the bottom of the form to save the public key in TIR.

TIR saves the public key only when you select Add Key, then returns you to your list with the new key in it.

Keep the private key safe

TIR keeps only the public key, so save the downloaded file in a secure place on your computer. You need it to connect to your server. A lost file cannot be recovered: create a new key and delete the old one.

Run chmod 600 <private key file> on the downloaded file before you first use it; see Connect with an SSH key.