Install Win32 OpenSSH

Install Win32 OpenSSH (test release)

• Download the latest build of OpenSSH. To get links to latest downloads this wiki page. A Chocolatey package is also available if you prefer using Chocolatey. For compatibility issues on Nano see issues on Nano. If you're interested in a PowerShell script to automate installation and configuration check out this issue.
• Extract contents of the latest build to C:\Program Files\OpenSSH
• Start Windows Powershell as Administrator
• Navigate to the OpenSSH directory
  • cd 'C:\Program Files\OpenSSH'
• On Windows 10, if you've enabled Developer Mode, you probably have another implementation of SSH installed on your machine. To figure out if this is the case, look for TCP port bindings on port 22 and these services: “SSH Server Broker” and “SSH Server Proxy”
  • netstat -anop TCP
  • If you do see 22 occupied, #610 has workarounds to deal with port conflict.
• Install sshd and ssh-agent services.
  • powershell -ExecutionPolicy Bypass -File install-sshd.ps1
• Generate SSH host keys
  • .\ssh-keygen.exe -A
  • .\FixHostFilePermissions.ps1 -Confirm:$false
• Secure SSH host keys (optional)
  • Start-Service ssh-agent
  • Download psexec from here
  • Launch cmd.exe as SYSTEM
    • psexec.exe -i -s cmd.exe
  • register host keys in above cmd.exe
    • ssh-add ssh_host_dsa_key
    • ssh-add ssh_host_rsa_key
    • ssh-add ssh_host_ecdsa_key
    • ssh-add ssh_host_ed25519_key
  • Host private keys are now securely stored by ssh-agent, private key files can be deleted at this point.
• Open the firewall on TCP port 22 to allow inbound SSH connections
  • New-NetFirewallRule -Protocol TCP -LocalPort 22 -Direction Inbound -Action Allow -DisplayName SSH
• Setup sshd and ssh-agent to auto-start (optional)
  • Set-Service sshd -StartupType Automatic
  • Set-Service ssh-agent -StartupType Automatic

Note: New-NetFirewallRule is for servers only. If you're on a client desktop machine (like Windows 10) try:

netsh advfirewall firewall add rule name=SSHPort dir=in action=allow protocol=TCP localport=22

Uninstall Win32 OpenSSH

• Start Windows Powershell as Administrator
• Navigate to the OpenSSH directory
  • cd 'C:\Program Files\OpenSSH'
• Run the uninstall script
  • powershell.exe -ExecutionPolicy Bypass -File uninstall-sshd.ps1