Iċċekkja u attiva s-servizz
Ħaddem PowerShell bħala amministratur fuq is-server. Windows Server 2025 jinkludi OpenSSH: iċċekkja l-istat flok installazzjoni mill-ġdid bl-addoċċ. L-eżempju jinstalla biss jekk nieqes, jibda sshd u bidu awtomatiku. Nuqqas ta’ download jista’ jeħtieġ verifika tal-politika tal-aġġornament.
$cap = Get-WindowsCapability -Online -Name 'OpenSSH.Server~~~~0.0.1.0'
if ($cap.State -ne 'Installed') {
Add-WindowsCapability -Online -Name 'OpenSSH.Server~~~~0.0.1.0'
}
Start-Service sshd
Set-Service -Name sshd -StartupType Automatic
Get-Service sshdIllimita l-firewall għan-netwerk tal-amministrazzjoni
Ibdel is-subnet tad-dokumentazzjoni 192.0.2.0/24 man-netwerk reali tiegħek qabel tħaddem. Iċċekkja u illimita r-regola OpenSSH eżistenti jew oħloq waħda limitata jekk nieqsa. Żomm il-console. Ittestja TCP 22 minn kompjuter ieħor; port miftuħ ma jawtentikax is-server.
$AdminSubnet = '192.0.2.0/24'
$rule = Get-NetFirewallRule -Name 'OpenSSH-Server-In-TCP' -ErrorAction SilentlyContinue
if ($rule) {
$rule | Set-NetFirewallRule -Enabled True -RemoteAddress $AdminSubnet
} else {
New-NetFirewallRule -Name 'OpenSSH-Server-In-TCP' -DisplayName 'OpenSSH Server' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -RemoteAddress $AdminSubnet
}
Get-NetFirewallRule -Name 'OpenSSH-Server-In-TCP' | Get-NetFirewallAddressFilter
Test-NetConnection -ComputerName windows-server.example -Port 22Ivverifika identità u kont
Qabbel il-marka mill-console mal-mistoqsija tal-klijent. Uża l-isem tal-kont Windows. Amministraturi jużaw %ProgramData%/ssh/administrators_authorized_keys b’ACL speċjali, oħrajn normalment .ssh/authorized_keys fil-profil. Segwi Microsoft. CH-J jappoġġja għodod Windows magħżula; Linux Disk Manager u flussi NGINX ma jsirux funzjonijiet Windows.
ssh-keygen -lf "$env:ProgramData\ssh\ssh_host_ed25519_key.pub" -E sha256
ssh username@windows-server.example