You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/windows-server/system-management-components/upgrade-in-box-openssh-to-latest-openssh-release.md
+24-24Lines changed: 24 additions & 24 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,13 +26,13 @@ This article explains the difference between the in-box and GitHub versions, how
26
26
> [!NOTE]
27
27
> Upgrading temporarily stops the OpenSSH Server service and disconnects any active SSH sessions.
28
28
29
-
- In case the service restarts, have alternate access methods (such as RDP or console) available.
29
+
- In case the service restarts, have alternative access methods (such as RDP or console) available.
30
30
- Make sure you have the correct permissions to modify C:\ProgramData\ssh and install MSI packages.
31
31
- Before you install a new release in a production environment, test it in a staging environment first.
32
32
33
33
## Understanding in-box versus GitHub OpenSSH
34
34
35
-
By default, you use Windows Update to install and maintain the in-box OpenSSH feature. Typically, it resides in C:\Windows\System32\OpenSSH. The in-box version is Microsoft-supported and stable, but it updates only when Windows itself updates.
35
+
By default, you use Windows Update to install and maintain the in-box OpenSSH feature. Typically, the software resides in C:\Windows\System32\OpenSSH. The in-box version is Microsoft-supported and stable, but it updates only when Windows itself updates.
36
36
37
37
The GitHub version, known as Win32-OpenSSH, installs in C:\Program Files\OpenSSH, and has the newest features and fixes. However, you have to manually update it.
38
38
@@ -49,7 +49,7 @@ The following table lists the files and their default folder locations
Select one of the following methods for upgrading OpenSSH:
69
+
Select one of the following methods to upgrade OpenSSH:
70
70
71
71
- [Option 1: Use an MSI installer to upgrade OpenSSH to the latest GitHub release](#option-1-use-an-msi-installer-to-upgrade-openssh-to-the-latest-github-release)
72
72
- [Option 2: Use a ZIP file to upgrade OpenSSH to the latest GitHub release](#option-2-use-a-zip-file-to-upgrade-openssh-to-the-latest-github-release)
@@ -77,22 +77,22 @@ Select one of the following methods for upgrading OpenSSH:
77
77
> [!NOTE]
78
78
> Depending on your processor, OpenSSH installs in either C:\Program Files\OpenSSH or C:\Program Files\OpenSSH-Win64. The installer automatically registers the OpenSSH services and updates the PATH environment variable.
79
79
80
-
1. To download the MSI installer, go to [Win32-OpenSSH releases page on GitHub](https://github.com/PowerShell/Win32-OpenSSH/releases) and download the latest OpenSSH-Win64.msi or Win32 build.
80
+
1. To download the MSI installer, go to [Win32-OpenSSH releases page on GitHub](https://github.com/PowerShell/Win32-OpenSSH/releases), and download the latest OpenSSH-Win64.msi or Win32 build.
81
81
82
82
1. To install all components of the new version, open an administrative PowerShell command prompt window and run a cmdlet that resembles the following cmdlet:
83
83
84
84
```powershell
85
85
msiexec /i OpenSSH-Win64-v9.x.x.x.msi
86
86
```
87
87
88
-
1. To install only the client or server component, open an administrative PowerShell command prompt window and run a cmdlet that resembles the one of the following cmdlets, as appropriate:
88
+
1. To install only the client or server component, open an administrative PowerShell command prompt window, and run a cmdlet that resembles the one of the following cmdlets, as appropriate:
### Option 2: Use a ZIP file to upgrade OpenSSH to the latest GitHub release
108
+
### Option 2: Use a .zip file to upgrade OpenSSH to the latest GitHub release
109
109
110
-
If you don't want to use the MSI package to install the upgrade, you can use a ZIP archive file.
110
+
If you don't want to use the MSI package to install the upgrade, you can use a .zip archive file.
111
111
112
-
1. To download the latest ZIP file, go to [Win32-OpenSSH releases page on GitHub](https://github.com/PowerShell/Win32-OpenSSH/releases) and download the appropriate file.
112
+
1. To download the latest .zip file, go to [Win32-OpenSSH releases page on GitHub](https://github.com/PowerShell/Win32-OpenSSH/releases), and download the appropriate file.
113
113
114
-
1. Extract the ZIP file to C:\Program Files\OpenSSH.
114
+
1. Extract the .zip file to C:\Program Files\OpenSSH.
115
115
116
116
1. Open an administrative PowerShell window, change to the C:\Program Files\OpenSSH folder, and then run the following command:
117
117
@@ -137,23 +137,23 @@ If you don't want to use the MSI package to install the upgrade, you can use a Z
1. To configure the OpenSSH Server service and then start it, run the following cmdlets.
149
+
1. To configure the OpenSSH Server service and then start it, run the following cmdlets:
150
150
151
151
```powershell
152
152
Start-Service sshd
153
153
Set-Service sshd -StartupType Automatic
154
154
```
155
155
156
-
## Step 3: Create the firewall rule, if necessary
156
+
## Step 3: Create the firewall rule, if it's necessary
157
157
158
158
1. To check for existing firewall rules, go to your OpenSSH client computer, and run the following cmdlet at a PowerShell command prompt:
159
159
@@ -171,11 +171,11 @@ If you don't want to use the MSI package to install the upgrade, you can use a Z
171
171
172
172
## Step 4: Verify the installation
173
173
174
-
1. Make sure that C:\ProgramData\ssh still has your previous configuration and keys. If necessary, restore this information from your backup.
174
+
1. Make sure that C:\ProgramData\ssh still has your previous configuration and keys. If it's necessary, restore this information from your backup.
175
175
176
176
1. To check the version, run `ssh -V` at the PowerShell command prompt.
177
177
178
-
1. To check the service status and connectivity, run the following cmdlets at the PowerShell command prompt:
178
+
1. To check the service status and connectivity, run the following cmdlets at a PowerShell command prompt:
179
179
180
180
```powershell
181
181
Get-Service sshd
@@ -185,26 +185,26 @@ If you don't want to use the MSI package to install the upgrade, you can use a Z
185
185
> [!NOTE]
186
186
> The display name of the service is "OpenSSH SSH Server."
187
187
188
-
1. To verify that you're using the correct SSH binary, run the following cmdlets at the Windows PowerShell command prompt:
188
+
1. To verify that you're using the correct SSH binary, run the following cmdlets at a Windows PowerShell command prompt:
189
189
190
190
```powershell
191
191
Get-Command ssh.exe | Select-Object Source
192
192
```
193
193
194
-
1. To check for errors, open Event Viewer and then select **Applications and Services Logs** > **OpenSSH** > **Operational**.
194
+
1. To check for errors, open Event Viewer, and then select **Applications and Services Logs** > **OpenSSH** > **Operational**.
195
195
196
196
1. Make sure that administrators and users can authenticate.
197
197
198
-
1. To avoid path conflicts, check for multiple OpenSSH folders (typically in the System32 folder). If multiple OpenSSH folders exist, keep the newest folder and remove any older ones.
198
+
1. To avoid path conflicts, check for multiple OpenSSH folders (typically in the System32 folder). If multiple OpenSSH folders exist, keep the newest folder, and remove any older folders.
199
199
200
-
## Common issue quick reference
200
+
## Common issues quick reference
201
201
202
202
|**Symptom**|**Likely cause**|**Resolution**|
203
203
| --- | --- | --- |
204
-
| SSH service fails to start | Missing or misconfigured host keys | Restore backed-up keys and restart the service |
205
-
| Authentication errors | Improper key file permissions | Make sure only SYSTEM and Administrators can read or write key files |
204
+
| SSH service doesn't start | Missing or misconfigured host keys | Restore backed-up keys and restart the service |
205
+
| Authentication errors | Improper key file permissions | Make sure that only SYSTEM and Administrators can read or write key files |
206
206
| Old binaries still run | PATH still points to System32\OpenSSH | Remove or rename the outdated directory |
207
-
| Port 22 unreachable | Firewall rule is missing |Recreate inbound rule for TCP port 22 |
207
+
| Port 22 unreachable | Firewall rule is missing |Re-create the inbound rule for TCP port 22 |
0 commit comments