Passwordless SSH

ESXi0

• mkdir /vmfs/volumes/Admin/Utilities/ssl
• mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi1
• mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi1/keys
• mkdir /.ssh
• cd /.ssh
• /usr/lib/vmware/openssh/bin/ssh-keygen -t rsa -b 4096
• ls
• cat id_rsa.pub | ssh root@ESXi1 'cat >> /etc/ssh/keys-root/authorized_keys'
• cd /etc/ssh/keys-root/
• ls -l
• cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi1/keys

ESXi1

• mkdir /vmfs/volumes/Admin/Utilities/ssl
• mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi0
• mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys
• mkdir /.ssh
• cd /.ssh
• /usr/lib/vmware/openssh/bin/ssh-keygen -t rsa -b 4096
• ls
• cat id_rsa.pub | ssh root@ESXi0 'cat >> /etc/ssh/keys-root/authorized_keys'
• cd /etc/ssh/keys-root/
• ls -l
• cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys
• vi /etc/ssh/sshd_config

PermitRootLogin yes
UsePAM yes
# only use PAM challenge-response (keyboard-interactive)
PasswordAuthentication no 
# ?????? #
ChallengeResponseAuthentication no