DESY HOME IT HOME Print Preview Print Window

SSH / SCP Howto

ssh/ scp function

Quotation from the manual pages:

ssh is a program for logging into a remote machine and for executing commands on a remote machine. It is intended to replace rlogin and rsh, and provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel.

scp copies files between hosts on a network. It uses ssh for data transfer, and uses the same authentication and provides the same security as ssh.

Policy at DESY since May 2000 is that ssh is the only allowed login to DESY machines from outside, because it has password encryption (compared with rsh, rlogin, rcp, ftp, telnet, which have no password encryption)

ssh / scp at DESY

ssh is installed on all by IT managed unix hosts and included in all by IT provided unix installations. Almost all of these machines have public and private RSA/DSA host keys generated and these host keys are maintained by the IT systems group. Therefore one can use ssh directly between those machines without further user action, see the following command examples:

Command Examples

DESY Bastion host

If you want to login from outside DESY from a host without ssh installed and you are unable to install ssh, then there is the possibility to login via the web to the DESY bastion host:, where you will find further documentation.

More information

For more information see the manual pages.Please note, that there are differences between the different ssh implementations.
Additionally here are some links concerning with ssh / scp:

Some other interesting links (some are not recent, but useful):

Questions and problem report

Please send questions or report problems to

Imprint © 2013 Last update: 12. Dec. 2003