Putty Fatal Error Type 11 When Trying to Use Public Key Authentication with PAM

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

An SSH TCP service was configured for Putty, but when end users try to connect, they get the following Putty fatal error.

 

Environment

Privileged Access Manager  3.4.2 and above

Cause

The error occurs when the TCP service is not configured to use public key authentication.

 

Resolution

In PAM, open the TCP service and enable public key authentication.

Additional Information

After configuring the TCP service and trying to connect with Putty, the end user may see a Putty fatal error type 11 with a different message. Refer to the screenshot below.

If this error occurs, it is because Putty is not configured to allow agent forwarding. To enable it, open Putty and go to Connection > SSH > Auth, then click "Allow agent forwarding" and save the settings.

For more information, please refer to the following section of the documentation.

Create an SSH Service to Access a Device