This Private Key Will Be Ignored

👉🏻👉🏻👉🏻 ALL INFORMATION CLICK HERE 👈🏻👈🏻👈🏻

Sign up or log in to view your list.
I've OpenSSH 7.6 installed in Windows 7 for testing purposes. SSH client & server work just fine till I tried to access one of my AWS EC2 box from this windows.
It seems like I need to change the permission on the private key file. This can be easily done on unix/linux with chmod command.
private-key.ppm is copied directly from AWS and I guess the permission too.
Sabrina
Sabrina 3,333●66 gold badges●1313 silver badges●2222 bronze badges
Martin Prikryl
17.6k●66 gold badges●5757 silver badges●129129 bronze badges
Is your private key actually in C:\ root path? I can see why it is complaining as usually things in C:\ are accessible by everyone. Have you tried moving it to a folder that only you as the user have access (eg. C:\Users\username\desktop) and see if that message still comes up? – Darius Feb 18 '18 at 5:19
@Darius, yes it is. When you copy a file from unix/linux to windows, the permission is copied as well. I need to change this but not sure how to do it on windows. This can be easily done on unix/linux with chmod command. – Sabrina Feb 18 '18 at 5:27
@IgnacioVazquez-Abrams, ACL? What kind of ACL? – Sabrina Feb 18 '18 at 5:28
@Sabrina Either you use icacls command to change permission, or simply right click on the Private Key, and choose Properties, and check under "Security" tab. And make sure that it is only accessible by you / whoever supposed to be able to access the private key. If "Users" have read access - means anyone that have access to the system can read that private key. – Darius Feb 18 '18 at 5:30
You locate the file in Windows Explorer, right-click on it then select "Properties". Navigate to the "Security" tab and click "Advanced".
Change the owner to you, disable inheritance and delete all permissions. Then grant yourself "Full control" and save the permissions. Now SSH won't complain about file permission too open anymore.
It should end up looking like this:
iBug
iBug 7,680●66 gold badges●2929 silver badges●6060 bronze badges
MSC
517●11 gold badge●55 silver badges●1212 bronze badges
I'd just like to add 1) This method works on my Windows 10 (10.0.17134.191) box w/Cygwin ver CYGWIN_NT-10.0-WOW 2.3.1(0.291/5/3) 2015-11-14 12:42 and ssh ver OpenSSH_for_Windows_7.6p1, LibreSSL 2.6.4, and 2) Thanks! @iBug! – atreyu Jul 28 '18 at 15:10
Actually, I did that and it still complains that 0777 permissions are too open. – Aaron Bramson Sep 4 '18 at 8:25
Why is this so difficult on windows, can someone just add a --ignore-stupid-rule command option? – Liam Mitchell Dec 20 '18 at 20:57
Thanks, worked like a charm. – giovannipds Sep 2 '19 at 17:46
I still get: Permissions 0770 are too open – Buntel May 13 '20 at 21:17
Keys must only be accessible to the user they're intended for and no other account, service, or group.
JW0914
JW0914 4,862●33 gold badges●2020 silver badges●4040 bronze badges
What if the owner is actually a group? In my case, I have a file owned by network service so Cygwin thinks the permission is 0770 instead of 0700. – hyspace Nov 12 '18 at 21:29
A file must be owned by a user and a group, not just a group. Group permissions are the 3rd octal [user is the 2nd] in a four octal specification and SSH keys cannot be group or others accessible – JW0914 Nov 13 '18 at 3:16
That is the case of Unix. In Windows, network service can own a file and it is a group – hyspace Nov 13 '18 at 18:40
this should be correct answer. Thanks for CLI options. GUI always sucks in windows case. – shyammakwana.me Apr 30 '19 at 20:51
On Windows10 I get Invalid parameter "/grant" I had to add :r with a space Icacls $Key /c /t /grant :r $env:UserName:F – Daniel Pinyol 5 hours ago
In addition to the answer provided by ibug. Since i was using the ubuntu system inside windows to to run the ssh command. It still was not working. So i did
Parv Sharma
Parv Sharma 593●44 silver badges●55 bronze badges
sudo should not be utilized to open an SSH session as it's a security risk. The only time (at least that I'm aware of) root's account should be utilized to open an SSH session is on single-user systems (i.e. normally found on router OS's [OpenWrt, DD-WRT, etc.] and other embedded systems). SSH keys must be accessible only to the user they're for and no other account, service, or group. – JW0914 May 27 '19 at 18:03
@JW0914 LOL I have a single-user Debian server and the sole (login) user is root. I don't think an extra non-root user is beneficial because it's my personal server and I login only when performing maintenance work. – iBug Oct 28 '19 at 5:12
@iBug Please re-read my comment, as it appears you entirely missed the second sentence... – JW0914 Oct 28 '19 at 12:02
Best answer. When using ubuntu shell on Windows, the advise about safety of the root access is totally irrelevant – Dmitry Torba Apr 5 '20 at 1:19
This worked for me. I did the above solutions and was still getting the 0077 warning but this fixed it. – Timaayy Sep 7 '20 at 22:07
I had a similar issue but I was at work and don't have the ability to change file permissions on my work computer. What you need to do is install WSL then copy the your key to the hidden ssh directory in WSL:
Now you should be able to modify the permissions normally.
JKauffman
JKauffman 421●33 silver badges●22 bronze badges
Giacomo1968
46.7k●1616 gold badges●150150 silver badges●189189 bronze badges
+1 - this appears to be the working solution for Windows Terminal / WSL1+2 users. I also did a chown for good measure and used sudo ssh and I was able to connect. – alex Sep 17 '20 at 14:37
At least in Linux and Mac the ssh final part is not necessary, chmod 600 on the ppk file and then sftp connection works. see stackabuse.com/… – Dr Potato Mar 24 at 15:07
THANK YOU, this was making me absolutely miserable, you've restored my faith in humanity and made me a better dev – Ben Saunders Apr 20 at 20:34
You just need to do at least four things:
Artur Mustafin
Artur Mustafin 294●22 silver badges●55 bronze badges
Matthew Lock
4,481●22 gold badges●2929 silver badges●4242 bronze badges
This was the only thing in the entire internet that worked for me! – Yasiel Cabrera Sep 25 '20 at 1:47
what does step 4 mean? Can you elaborate on what "this should be enough to add id_rsa." means? – Matthew Lock Aug 15 at 7:00
use below command on your key it works on windows
Walter Ferrao
Walter Ferrao 117●11 silver badge●22 bronze badges
NB: These commands must be issued within a command window (CMD.EXE). The second command line would not work for me in a PowerShell command window; it would produce an error message saying 'Invalid parameter "%username%"', even though the environment variable USERNAME is defined an has the correct value. Also, after I invoked these two icacls commands on my RSA private key file, I continue to get the "bad permissions" error message when I invoke ssh in a PowerShell window. – Jim Fischer Aug 27 '20 at 20:18
doesn't worth either, still gives "Permissions for '' are too open." – Matthew Lock Aug 15 at 7:03
This seems to be related to the version of OpenSSH you're running:
When running ..\Git\usr\bin\ssh.exe, it works fine and doesn't complain about the permissions, but running ..\OpenSSH\ssh.exe comes back with the following, even though key ACLs are Full Access for myself and nothing else:
Rich S
Rich S 283●11 silver badge●66 bronze badges
JW0914
4,862●33 gold badges●2020 silver badges●4040 bronze badges
OpenSSH should not be installed to the Windows directory for whole host of reasons, from security, to it being a massive inconvenience should one need to fix a corrupted Windows directory either via DISM or using the Reset option (which has been improved to utilize the WinSxS directory versus reverting to the original install.esd). – JW0914 Jul 9 '18 at 19:40
This is what helped me, I never got the windows ssh version to work in this scenario, only Git's :( – kutacoder Mar 7 '19 at 0:27
This was also the fix for me. It seems Windows 10 Pro now bundles a pooched version of openssh. I was forced to remove the C:\Windows\System32\OpenSSH folder and add git's ssh.exe to PATH. – Shukri Adams May 23 '19 at 16:45
This "fixed" it for me, using C:\Program Files\Git\usr\bin\ssh.exe works as C:\Windows\System32\OpenSSH\ssh.exe does not – smartins Nov 12 '19 at 9:12
The error message is due to using an invalid key format [a PuTTY key], as OpenSSH doesn't support PuTTY keys (they must be converted first via PuTTYgen → Conversions) – JW0914 Jun 29 '20 at 12:57
You can use icacls in Windows instead of chmod to adjust file permission. To give the current user read permission and remove everything else:
manjuv
manjuv 67●11 silver badge●33 bronze badges
JW0914
4,862●33 gold badges●2020 silver badges●4040 bronze badges
still says Permissions for are too open. – Matthew Lock Aug 15 at 7:06
A single line in CMD might do the trick; as described here, adding the key from stdin instead of changing the permissions:
JW0914
4,862●33 gold badges●2020 silver badges●4040 bronze badges
This is just a scripted version of @JW0914's CLI answer, so upvote him first and foremost:
bbarker
bbarker 296●33 silver badges●99 bronze badges
JW0914
4,862●33 gold badges●2020 silver badges●4040 bronze badges
I couldn't get any of these answers working for me due to permission issues, so I'll share my solution:
isopach
isopach 111●33 bronze badges
JW0914
4,862●33 gold badges●2020 silver badges●4040 bronze badges
Please elaborate on "I couldn't get any of these answers working for me due to permission issues...", as there's at least four previous answers that permanently resolve permissions issues. – JW0914 Jul 2 '20 at 11:39
@JW0914 Unfortunately I cannot recall the cause of my problem a month ago, much less 5 months ago. – isopach Jul 2 '20 at 12:05
At least four other answers provide the exact same, or more, information that is in this answer, and it's simply not possible for any permissions issues to occur if any of those four answers were followed. – JW0914 Jul 2 '20 at 12:16
@JW0914 You've already downvoted my answer man, what more do you want? – isopach Jul 2 '20 at 12:18
The other options here did not work for me either (tried both through the GUI and multiple icacls methods). Comparing a working id_rsa file to one that it complained about (claimed 770 permissions), the permissions as shown in Windows were identical. A simple copy and paste in Explorer seemed to reset the permissions so did not work, but by using ROBOCOPY /COPYSEC (from an elevated command prompt) I was able to make a copy of a working key file, edit it to insert my new private key, and then this error went away. – Jimbly Sep 10 '20 at 22:33
Copy the public and private keys to %userprofile%\.ssh
Use the batch script below after finding your keys from the cmd prompt with where *.pub:
Md %Userprofile%\.ssh
Copy PublicKey %Userprofile%\.ssh
Copy PrivateKey %Userprofile%\.ssh

Cd %Userprofile%\.ssh
Icacls .\PublicKey /Inheritance:r
Icacls .\PrivateKey /Inheritance:r
Icacls .\PublicKey /Grant:r "%Username%":"(F)"
Icacls .\PrivateKey /Grant:r "%Username%":"(F)"

Right-click each file → Properties → Security:
Remove everyone except the user, setting the permissions for the user to Read
Lynn Edmiston
Lynn Edmiston 11●33 bronze badges
JW0914
4,862●33 gold badges●2020 silver badges●4040 bronze badges
Isn't the point of the script to avoid the last step? I don't understand – Ramhound Apr 18 '20 at 2:22
To piggyback on @Ramhound's comment, how does this answer differ from at least four other answers showing the exact same thing via the GUI, CLI, and screenshots? – JW0914 Jul 2 '20 at 11:55
Download and unzip OpenSSH-Win64.zip (or Win32, depending on your system)
Execute FixUserFilePermissions.ps1 in PowerShell with administrator privilege
JW0914
4,862●33 gold badges●2020 silver badges●4040 bronze badges
The FixUserFilePermissions.ps1 script doesn't fix all permissions issues; for example, it will not fix permissions issues for an admin account that wouldn't be using %UserProfile%\.ssh (IIRC, an issue was opened for this - as of this writing, this has not been addressed in FixUserFilePermissions.ps1). The only way to guarantee correct file permissions is to use icacls (as of this writing). – JW0914 Jul 2 '20 at 12:05
Here's the way to do it using Microsoft's tooling, avoiding the problem from the get-go. But it should also fix the issue, meaning you can follow these instructions with existing keys.
Start PowerShell/Terminal as Administrator and run the following:
Anonymous cowards press down to go down on me.
Louis Waweru
Louis Waweru 21.8k●3636 gold badges●124124 silver badges●190190 bronze badges
Download with Git for Windows, or directly.
It also has other useful Linux commands like tar and gzip.
Dallas Clarke
Dallas Clarke 99●11 bronze badge
bZezzz
752●55 silver badges●1111 bronze badges
How exactly does this even apply to the question being asked? – JW0914 Jul 2 '20 at 11:57
@JW0914 It works around the issue. SSH with Mingw-w64 doesn't look at the key permissions and will allow you to connect with a machine readable key file. – Dallas Clarke Jul 3 '20 at 0:53
What you're suggesting is simply insecure and would never be recommended. SSH keys should only be accessible by the user they belong too and no other user, group, or service... doing so negates the purpose of an SSH key. Please google the error message in the question or refer directly to OpenSSH's man pages. – JW0914 Jul 3 '20 at 11:20
I had the same problem on Windows 10, and it arouse when I created a second user account on my machine.
Since that new user was also an administrator and It had access to my user folder, I did these steps to limit the access on my .ssh folder and it worked!
Now try to log back in to your remote computer using ssh!
How does this differ from the other answers which indicates the key permissions must be modified to only include the one user that intends to use. – Ramhound May 15 '20 at 23:21
it seemed a little more straight forward, so I thought I share it. – khalifmahdi May 16 '20 at 0:14
@khalifmahdi How exactly is this more straightforward? Two answers provide screenshots, whereas at least two others provide copy/paste commands for a terminal – JW0914 Jul 2 '20 at 12:13
Answer by iBug works fine! You can follow that and get rid of this issue.
But there are few things which are needed to be cleared as I faced issues during setting up permissions and it took few minutes for me to figure out the problem!
Following iBug's answer, you'll remove all the permissions but how do you set Full Control permission to yourself? that's where I got stuck at first as I didn't knew how to do that.
After Disabling Inheritance, you'll be able to delete all allowed users or groups.
Click on Add then click on Set a Principal then enter System and Administrators and your email addredd in the field at bottom then click on check names.
It'll load the name if user exists. Then, Click on OK > Type Allow > Basic Permisisons Full Control > Okay
This will setup Full Control permission to SYSTEM, Administrators and Your User.
After that try to ssh using that key. It should be solved now.
I had same issue and I solved that using this method. If there's any user or group with that name then it'll load that.
lazycipher
lazycipher 101●11 bronze badge
How does this answer differ from at least four other answers showing the exact same thing via the GUI, CLI, and screenshots? – JW0914 Jul 2 '20 at 12:14
The answer I followed was causing issues which I clarified properly here(probably)! I wrote this 1.5 years ago! (Luckily I moved to Linux just a month after that) Exact same thing can be done in many ways obviously but that doesn't mean one shouldn't mention the other way round. – lazycipher Jul 5 '20 at 19:08
I'm a Window user, using the Windows's bash and followed all the steps to set permission using Windows GUI, and it still doesn't work and it complains:
The I added sudo at the front of the ssh command and it just works. Hope this is helpful to others.
Alex Ramses
Alex Ramses 99●11 bronze badge
But do you login to the server as yourself or as root? – G-Man Says 'Reinstate Monica' Nov 26 '19 at 6:56
I run the Window bash terminal as myself, but I did 'Run as adminstrator' when I launch the Bash. – Alex Ramses Nov 26 '19 at 8:13
sudo should not be used for an SSH session (please use a search engine to understand why - it's a security risk) and you're receiving the error because the permissions [0555] are incorrect. On BSD/Linux, the UGO privs must be 600 or 400. If you're trying to copy your key from Windows to WSL, this is not possible due to how the ACLs are set and maintained between Windows and WSL; instead, copy/paste the key's contents into a new file on WSL. – JW0914 Jul 2 '20 at 12:12
Highly active question. Earn 10 reputation (not counting the association bonus) in order to answer this question. The reputation requirement helps protect this question from spam and non-answer activity.
2021 Stack Exchange, Inc. user contributions under cc by-sa
By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.
Accept all cookies Customize settings

Sign up or log in to view your list.
I'm working to set up Panda on an Amazon EC2 instance. I set up my account and tools last night and had no problem using SSH to interact with my own personal instance, but right now I'm not being allowed permission into Panda's EC2 instance. Getting Started with Panda
I've chmoded my keypair to 600 in order to get into my personal instance last night, and experimented at length setting the permissions to 0 and even generating new key strings, but nothing seems to be working.
Any help at all would be a great help!
Hm, it seems as though unless permissions are set to 777 on the directory, the ec2-run-instances script is unable to find my keyfiles. I'm new to SSH so I might be overlooking something.
btw
btw 6,526●99 gold badges●3737 silver badges●4040 bronze badges
Mohsen
59.5k●3030 gold badges●151151 silver badges●177177 bronze badges
ec2-run-instances should only require a keypair name, which is something that lives on Amazon's side. You only should be using your actual private key (the one on disk) when you SSH in. What error are you getting from ec2-run-instances? – user27619 Oct 30 '08 at 23:30
terrible title for this question. – MikeNereson Jun 17 '11 at 19:19
@MikeNereson: feel free to edit it, that's how we make things better around here – Stu Thompson Oct 3 '11 at 7:32
Are you sure you set it to 0600 (octal), and not 600 (decimal)? – hyde Feb 28 '13 at 8:07
I've chmoded my keypair to 600 in order to get into my personal instance last night,
And this is the way it is supposed to be.
From the EC2 documentation we have "If you're using OpenSSH (or any reasonably p
Little Periscope Naked
Busty Britain Porno Video
Blonde Mature Masturbation
Femdom Cuckold Foot
Mom Son Vacation Nude Caption
Fixing “WARNING: UNPROTECTED PRIVATE KEY F…
Windows SSH: разрешения для «закрытого ключа» слишком …
Windows SSH: Permissions for 'private-key' are too open - 简书
Permissions 0664 for '/home/root/.ssh/id_rsa' are too …
Cannot ignore new Windows 10 built-in SSH client in ...
Решение проблемы «WARNING: UNPROTECTED P…
How to Fix "WARNING: UNPROTECTED PRIVATE KEY …
This Private Key Will Be Ignored