SSH Reference Manual

Central Key Store
Instead of storing keys in the file system, SSH2 includes a key and password store with central access control, providing
maximum security for user credentials. This enables the easy and secure implementation of batch processes without
requiring the use of passwords in batch files.
Secure SFTP Transfer
SSH2 includes an OSS and a Guardian SFTP client, as well as an SFTP server that provides remote SFTP client access
to both Guardian and OSS files. All components allow users to navigate the Guardian file system and specify files using
the OSS or Guardian file name syntax, regardless of whether OSS is running. Additionally, just as with standard
NonStop FTP, attributes for target files can be specified, allowing direct transfers of structured Guardian files.
TCP and FTP Port Forwarding
TCP port forwarding allows secure tunneling of Telnet sessions, as well as other connections. SSH2 also tunnels FTP
sessions, securing existing FTP procedures with minimal changes. Both local and remote forwarding are supported.
Single Sign-on
SecurSH now supports user authentication and key exchange based on the GSSAPI/Kerberos 5 standards (RFC 4462).
When used with a Kerberos software package on the NonStop server, this enables integration with Microsoft Active
Directory and other Kerberos-based single sign-on solutions.
Note: HP does not offer a Kerberos product today, it must be purchased separately from a NonStop partner.
TCP/IPv6
Starting with version 0092 SSH2 supports IPv6 specified in RFC 2460 (Internet Protocol, Version 6). See section
"TCP/IPv6 Configuration" for related configuration details and section "TCP/IPv6 Considerations
" for cases specific to
IPv6.
The SSH Protocol
SSH (Secure Shell), consisting of a suite of network connectivity protocols, is especially popular in UNIX environments.
SSH2 supports version 2 of the Secure Shell protocol. This version also includes specifications for a file transfer
protocol. Although the name implies otherwise, this standard bears no relationship to the popular file transfer protocol
known as FTP.
26 • Introduction HP NonStop SSH Reference Manual