Log in to Windows 10 via SSH

In this article, we will show you how to set it up OpenSSH στα Windows 10 and connect to them via SSH, using it Putty or any other program;client SSH.

The latest versions of Windows 10 include a built-in server SSH and one client based on OpenSSH. This means that you can now connect to Windows 10 from afar, using any SSH client, as in a Linux distribution. Let's see how.

Step 1: Make sure the version of Windows 10 is 1809 or newer. The easiest way to do this is to open a command prompt window and run the command:
winver

Note: If you have an older version of Windows 10, you can update it through Windows Update or using an ISO image with a newer version of Windows 10. If you do not want to update their version Windows 10, you can manually install Win32-OpenSSH port for Windows from GitHub (https://github.com/PowerShell/Win32-OpenSSH) and avoid Step 2.

Step 2: Install the server OpenSSH στα Windows 10 via the settings panel:
Go to Settings> Applications> Options.

Click + Add Feature, scroll down the list and find it Server OpenSSH (secure shell server (SSH) based on OpenSSH, for secure key management and access from remote machines).

Click on it and press the "Install" button

You can also install the sshd server using PowerShell:

Add-WindowsCapability -Online -Name OpenSSH.Server *

Or using DISM:

dism / Online / Add-Capability / CapabilityName:OpenSSH.Server ~~~~ 0.0.1.0

If you want to make sure the server OpenSSH is installed, open one PowerShell window and execute the following command:

Get-WindowsCapability -Online | ? Name -like 'OpenSSH.Server * '

Step 3: Check the status of the services ssh-agent and sshd using its command PowerShell Get-Service:

Get-Service -Name *ssh*

Step 4: As you can see, both services are in downtime and are not added to the auto-start list. To start the services and set up auto-start for them, run the following commands, one by one:

Start-Service sshd Set-Service -Name sshd -StartupType 'Automatic' Start-Service 'ssh-actor 'Set-Service -Name'ssh-agent '-StartupType' Automatic '

you should also allow incoming connections to TCP port 22 on the Firewall Windows Defender (if enabled):

netsh advfirewall firewall add rule name = ”SSHD service” dir = in action = allow protocol = TCP localport = 22

Step 5: You can now log in to Windows 10 using anyone client SSH. To connect from Linux, use the command:

ssh -p 22 [Email protected]

where admin put the local user of Windows to which you want to connect and where 192.168.1.90 enter the LOCAL IP address of your computer Windows 10.

Note: The above example refers to a connection within a local private network (intranet). If you want to connect from another network you have to make settings on your router so that the demand on port 22 leads to that Windows computer, as well as to know at all times the external IP given to you by your provider.

After a successful connection a new command prompt window will open Windows.

Trick: To run the PoweShell console instead of the command prompt (cmd.exe) when connecting via SSH στα Windows 10, you must execute the following command in Windows 10 (under administrator account):

New-ItemProperty -Path “HKLM: \ SOFTWARE \OpenSSH”-Name DefaultShell -Value“ C: \Windows\ System32 \ WindowsPowerShell \ v1.0 \powershell.exe ”-PropertyType String –Force

So you change the default shell OpenSSH in the registry. Now when you log in Windows via SSH, you will immediately see his prompt message PowerShell instead of cmd.exe.

If you want to use authentication ssh Instead of password authentication, you must create a key using ssh-keygen to your customer.

Next, the contents of the id_rsa.pub file must be copied to the C: \ Users \ Admin \ file.ssh\ authorized_keys at Windows 10.

After that, you can connect from the computer-client of Linux in Windows 10 without password. Use the command:

ssh  -l  [Email protected]

You can configure various server settings OpenSSH στα Windows, using the %% programdata% \ configuration filessh\ sshd_config.

For example, you can turn off password authentication and leave only key authorization with:

PubkeyAuthentication yes PasswordAuthentication no