HP Integrity Virtual Machines Installation, Configuration, and Administration Version A.03.50

10.3.3.1 SSH Key Setup
HP recommends that you use the HP-UX Distributed Systems Administration Utilities (DSAU)
tools to set up the SSH keys on the source and destination hosts, which is installed by default on
HP-UX 11.23 (0512 release). The bundle name is DSAUtilities.
You use the /opt/dsau/bin/csshsetup command to set up SSH keys between hosts. The
csshsetup command simplifies the task of setting up SSH public-key authentication trust
relationships between hosts. The –r (round-robin) option is used to set up bidirectional
authentication. Round-robin key exchange establishes “any-member-to-any-member”
authentication. For more information, see csshsetup.
Alternatively, SSH keys can be generated manually on the individual systems and then copied
to the remote system's $HOME/.ssh/authorized_keys2 file by using the ssh_keygen
command. The ssh_keygen command generates, manages, and converts authentication keys
for SSH. It also creates RSA keys for use by the SSH protocol.
To use SSH with RSA or DSA authentication, the ssh_keygen command creates the
authentication key in one of the following files:
• $HOME/.ssh/identity
• $HOME/.ssh/id_dsa
• $HOME/.ssh/id_rsa
The system administrator may also use the ssh_keygen command to generate host keys, as
seen in /etc/rc. See ssh-keygen for more information about SSH key generation.
Table 10-2 lists the files that are modified or created for RSA key generation.
Table 10-2 RSA Key Files
File ContentsFile Name
Default RSA private key for the user
$HOME/.ssh2/id_rsa
Default RSA public key for the user
$HOME/.ssh2/id_rsa.pub
Names of the host RSA public keys that can authenticate
to this account
$HOME/.ssh/authorized_keys
10.3.3.2 SSH Key Setup Troubleshooting
If the SecureShell is installed on both the source and destination systems, you can run the ssh
command on the source host, establishing a connection to the destination host. This ensures that
SSH keys are set up between the two hosts. The following error message can result from having
SSH keys set up improperly:
Error: hpvmmigrate: SSH execution error.
Error: hpvmmigrate: Remote execution error on destination-host.
10.4 Migrating Guests from Physical to Virtual Machines
The P2V assistant is a menu driven utility that helps you consolidate or migrate between systems.
The source and destination systems can actually be either virtual systems or physical systems,
as the feature is implemented as a general purpose utility. To use the P2V assistant, enter the
p2vassist command on the VM Host.
10.4.1 Requirements for Migrating a Workload
The Integrity VM software must be installed on the source system. The source system and target
system must have SSH connectivity. It should be possible to connect from the VM Host system
to the target server without a password (host-based authentication).
10.4 Migrating Guests from Physical to Virtual Machines 147