Configure Public Key Authentication

Use public key authentication when you do not want to use a password to connect to the audit log export receiver. Generate the SSH key pair on the Management Cloud Engine (MCE) that will perform the export. Store the private key on the MCE and install only the public key on the receiver host.

Perform these steps on the MCE host as the user who activated the MCE. Ensure that the following utilities are available on the MCE host:
  • ssh-keygen
  • ssh
  • ssh-copy-id, or shell access to the target receiver host
Also ensure that you can authenticate to the target receiver host to install the public key.
For public key authentication, Oracle recommends the following SSH key-pair algorithms:
  1. ED25519
  2. ECDSA with a minimum key size of 384 bits
  3. RSA with a minimum key size of 3072 bits