ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

How to setup SSH for Universal Server using Putty.


Article ID: 155211


Updated On:


Symantec Products


SSH can be used when PGP Universal Server web console is not available and for using command line functionality for the server.



Below are the steps to setup SSH access to PGP Universal Server using PuTTy:

1. Download Putty.exe and Puttygen.exe from

2. Open Puttygen, select SSH-2 RSA under Parameters and change Number of bits in a generated key to 2048.

3. Click on 'Generate' under Actions. (Move your mouse in the blank area to generate faster)

4. Save the Private Key and Copy the Public Key portion into a Notepad file.

5. Log in to PGP Universal Server using the SuperUser account->Open the Administrators tab->Click on the SuperUser Admin->Click on the + sign and copy the Public Key portion under Import key Block->Click on Save.

6. Open Putty, in Category under Session type IP Address of PGP Universal Server under Host Name and select SSH in connection type.

7. In Category > Click in + sign next to SSH->Click on Auth->Click on Browse and select the Private Key (.ppk file).

8. Under Session, give a name to the session and click on Save.

9. Click on Open to log in using root as user name.


Accessing the PGP Universal Server command line for read-only purposes (such as to view settings, services, logs, processes, disk space, query the database, etc) is supported. However, performing configuration modifications or customizations via the command line may void your Symantec Support agreement unless the following procedures are followed.

Any changes made to the PGP Universal Server via the command line must be:
·         Authorized in writing by Symantec Support.
·         Implemented by a Symantec Partner, reseller or Symantec Technical Support.
·         Summarized and documented in a text file in /var/lib/ovid/customization on the PGP Universal Server itself.
Changes made through the command line may not persist through reboots and may be incompatible with future releases. Symantec Technical Support may also require reverting any custom configurations on the PGP Universal Server back to a default state when troubleshooting new issues.

Applies To

All versions of PGP Universal Server