en:navody:winscp:start

WinSCP

WinSCP is one of the tools, that can be utilized to access your data stroge at CESNET Data Care. WinSCP is freeware working under Windows. WinSCP supports protocols FTPS and SCP/SFTP).

WinSCP (FTPS)

The guide is written for WinSCP version 5.14 running on Windows XP. Other versions of WinSCP or/and running on another operating system may act or look a little bit different.

The program is free to download at: http://winscp.net/eng/download.php

Based on the test mode is recommended to use version 5 and higher - compared to versions 4.x series is here reported a significant increase in bit rate.

After you installed WinSCP click on button “Nový”.

Fill in all as shown figure below and push “Přihlásit”.

During the login process is very important to check if fingerprint of server is valid. To verify server please use fingerprints below. All servers in one datacenter have the same RSA, DSA and ECDSA key.

Ostrava data center (du4):

RSA, SHA256 (du4) LP7QxtJN257nb4gI8JutEwbrplx+MwdrwBtkhovQl+U
ECDSA, SHA256 (du4) 9YvWE2h459dMcLWcLcD1DsrxTjqqMLD16eiSYXBVX9k
ECDSA, MD5 (du4) 23:f8:17:39:9e:18:4e:dc:bb:4a:b6:04:1c:f5:74:de

Jihlava data center (du5):

RSA, MD5 (du5) 4f:b3:b2:31:aa:30:f1:6f:bc:58:4f:2d:39:e7:85:26
RSA, SHA256 (du5) lIJzpmmnnCQReVAaVom/jkZ1hUNWe/4nnbAl58liJbI
ECDSA, MD5 (du5) d1:72:10:45:5b:3b:ac:c6:ae:e8:32:3b:1c:c3:3e:69
ECDSA, SHA256 (du5) YB7YnmuMktwsFxVe5qdzy2bLU9y+0yowEcpZp82P4nk

If the key does not match, stop connecting to the server and contact us at: support@cesnet.cz

After that you can copy files from your computer to data storage and back.

The combination FTPS protocol with WinSCP has problem with the symlinks to directories (eg. VO_storage-cache_tape) and refuses to copy files directly to them. It is necessary to open such symlink in GUI before you start copying.

WinSCP (SCP/SFTP)

One of the tools that can be used to connect over FTP/FTPS/SCP/SFTP protocols in Windows is WinSCP.

The guide is written for WinSCP version 5.14 running on Windows XP. Other versions of WinSCP or/and running on another operating system may act or look a little bit different.

The program is free to download at: http://winscp.net/eng/download.php

After you install WinSCP, run the program and fill in server address.

IPv4 addresses of access servers (hosts) for each data center are:

Ostrava ssh.du4.cesnet.cz
Jihlava ssh.du5.cesnet.cz

IPv6 addresses of access servers (hosts) for each data center are:

Ostrava ssh6.du4.cesnet.cz

Services using IPv6 addresses are currently in testing mode.

Next in the section “Protocol” we change transfer protocol to SFTP. In some case the protocol SFTP doesn't work properly and it is good activate function “Povolit nouzově SCP”. Instead of SFTP you can choose clear SCP protocol as well. After you selected protocol SFTP/SCP, the port number will change automatically to 22. In the next step we will enter credentials (username and password). For proper handling of files with UTF-8 names switch to the tab “Prostředí” and enable UTF-8 encoding. If you have all set, you can log in with “Přihlásit” or save setting with “Uložit”.

If you are using SCP protocol with file names contain accented characters you can encounter the problem with broken characters. Because of SCP protocol doen't allow UTF-8 encoding. Therefore the file names will be broken on data storage (server side). We don't recommended SCP for transfer these files.

During the login process is very important to check if hash (MD5 or SHA1) server is valid:

Ostrava data center (du4)

SHA256 (du4) F4:03:A0:42:69:D1:47:E7:71:CD:A3:00:FB:B1:3A:BA:38:DC:2A:36:B8:BC:2A:0E:18:79:7A:E4:54:A1:78:F8
SHA1 (du4) B9:F7:55:E9:18:F4:1F:B2:A3:25:B5:94:F7:06:62:63:CC:03:D9:69
MD5 (du4) 9D:E6:63:FA:75:FA:DC:53:3D:BA:AB:F3:AB:10:A5:48

If the key does not match, stop connecting to the server and contact us at: support@cesnet.cz

The certificate used on the servers was signed by these certification authorities.

It is important to have imported CRL (Certificate Revocation List) lists, containing serial numbers already revoked (invalid) certificates. Please download CRL lists of CAs that we are using into your browser and select the automatic update.

After you log in successfully, we can copy files to the server or from the server - in default layout is left window local system and right window remote system.

References

Last modified: 26.10.2016 14:04