blocks|key|2201824|text|如您所知，您不能对PuTTY/Plink使用加密密码(SecureString)。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2201825|您所能做的就是解密安全字符串，并将解密后的纯文本密码传递给PuTTY/Plink。|2201826|有关解密，请参见PowerShell+-+Decode+System.Security.SecureString+to+readable+password。|2201827|$securePass+=+Get-Content+C:\encrypted_password1.txt
$pass+=+$securePass+%7C+ConvertTo-SecureString

$Ptr+=+[System.Runtime.InteropServices.Marshal]::SecureStringToCoTaskMemUnicode($pass)
$decrypted+=+[System.Runtime.InteropServices.Marshal]::PtrToStringUni($Ptr)
[System.Runtime.InteropServices.Marshal]::ZeroFreeCoTaskMemUnicode($Ptr)
plink+-batch+-ssh+$defUser@$srv+-pw+$decrypted+|code-block|syntax|javascript|2201828|PuTTY+0.77+Plink新支持+switch，它允许更安全地通过本地文本文件传递密码(同时仍然是纯文本)。|2201829|你的问题2)没有任何意义。你写的你不能用钥匙。所以您不能使用-i交换机。更别提使用一些“生成的密码”了。|2201830|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/q/7468389/850848|1|https://the.earth.li/%257Esgtatham/putty/latest/htmldoc/Chapter3.html#using-cmdline-pw^0|R|C|0|0|8|1X|0|0|0|J|7|1|0|U|2|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|15|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|16|8|@]|D|@$9|17|A|18|1|19]]|E|$]]|$1|J|3|K|5|L|7|1A|8|@]|D|@]|E|$M|N]]|$1|O|3|P|5|6|7|1B|8|@]|D|@$9|1C|A|1D|1|1E]]|E|$]]|$1|Q|3|R|5|6|7|1F|8|@$9|1G|A|1H|B|C]]|D|@]|E|$]]|$1|S|3|-4|5|6|7|1I|8|@]|D|@]|E|$]]]|T|$U|$5|V|W|X|E|$Y|Z]]|10|$5|V|W|X|E|$Y|11]]]]

As you know, you cannot use encrypted password (<code>SecureString</code>) for PuTTY/Plink.
All you can do is to decrypt the secure string and pass the decrypted plain text password to the PuTTY/Plink.
For for decryption, see <a href="https://stackoverflow.com/q/7468389/850848">PowerShell - Decode System.Security.SecureString to readable password</a>:
<pre><code>$securePass = Get-Content C:\encrypted_password1.txt
$pass = $securePass | ConvertTo-SecureString

$Ptr = [System.Runtime.InteropServices.Marshal]::SecureStringToCoTaskMemUnicode($pass)
$decrypted = [System.Runtime.InteropServices.Marshal]::PtrToStringUni($Ptr)
[System.Runtime.InteropServices.Marshal]::ZeroFreeCoTaskMemUnicode($Ptr)
plink -batch -ssh $defUser@$srv -pw $decrypted 
</code></pre>
<hr />
PuTTY 0.77 Plink newly supports <a href="https://the.earth.li/%7Esgtatham/putty/latest/htmldoc/Chapter3.html#using-cmdline-pw" rel="nofollow noreferrer"><code>-pwfile</code> switch</a> that allows more safe way to pass the password via a local text file (while still plain-text).
<hr />
Your question 2) does not make any sense. You wrote that you cannot use keys. So you cannot use <code>-i</code> switch. Let alone use some &quot;generated password&quot; with it.

blocks|key|161245|text|$Credential+=+$(Get-Credential)
$user+=+$Credential.GetNetworkCredential().Username
$pass+=+$Credential.GetNetworkCredential().Password|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|161246|是我在脚本中使用的-pw；$+$putty+-ssh+$server+-l+$user+-pw+$pass+-m+$command|unstyled|161247|我知道您说您使用的是-I而不是-pw，但是我发现这种方法运行得很好，您的密码在任何地方都没有存储。|161248|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|L|8|@]|9|@]|A|$]]|$1|G|3|H|5|F|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|F|7|N|8|@]|9|@]|A|$]]]|J|$]]

<pre><code>$Credential = $(Get-Credential)
$user = $Credential.GetNetworkCredential().Username
$pass = $Credential.GetNetworkCredential().Password
</code></pre>

is what I use then in the script I use the -pw;
 $ $putty -ssh $server -l $user -pw $pass -m $command

I know that you were saying you did -I instead of -pw however I found this works pretty well that way there is no file with your password stored anywhere.

blocks|key|2201869|text|这是我的解决方案，在菜单循环中运行。效果很好。我只需要“缓存”我键入的输入或(将预先输入的凭据自动传递到对话框中)，否则每次必须重新输入凭据时。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2201870|$Key+=+New-Object+Byte[]+32
+++++[Security.Cryptography.RNGCryptoServiceProvider]::Create().GetBytes($Key)
$Key+%7C+Out-File+AES.key
(get-credential).Password+%7C+ConvertFrom-+++SecureString+-key+(get-content+AES.key)+%7C+set-content+"AESPassword.txt"
$password+=+Get-Content+AESPassword.txt+%7C+++ConvertTo-SecureString+-Key+(Get-Content+AES.key)
$credential+=+New-Object+System.Management.Automation.PsCredential($env:userName,$password)
$ServerName+=+Read-Host+-Prompt+"What+is+the+server+name?"
$Command+=+".\plink.exe"
$arg1++=++'-t'
$arg2+=+$credential.GetNetworkCredential().username%2B'@'%2B$ServerName
$arg3+=+'-pw'
$arg4+=+$credential.GetNetworkCredential().Password
$arg5+=+$scriptcmd
#Write-Output+$Command+$arg1+$arg2+$arg3+$arg4+$arg5
&+$Command+$arg1+$arg2+$arg3+$arg4+$arg5|code-block|syntax|javascript|2201871|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

This was my solution, which runs in a menu loop. works very well. 
I just need "cache" my typed input or (pass prior entered credentials into the dialog, automatically) otherwise every time I have to re-enter credentials.

<pre><code>$Key = New-Object Byte[] 32
 [Security.Cryptography.RNGCryptoServiceProvider]::Create().GetBytes($Key)
$Key | Out-File AES.key
(get-credential).Password | ConvertFrom- SecureString -key (get-content AES.key) | set-content "AESPassword.txt"
$password = Get-Content AESPassword.txt | ConvertTo-SecureString -Key (Get-Content AES.key)
$credential = New-Object System.Management.Automation.PsCredential($env:userName,$password)
$ServerName = Read-Host -Prompt "What is the server name?"
$Command = ".\plink.exe"
$arg1 = '-t'
$arg2 = $credential.GetNetworkCredential().username+'@'+$ServerName
$arg3 = '-pw'
$arg4 = $credential.GetNetworkCredential().Password
$arg5 = $scriptcmd
#Write-Output $Command $arg1 $arg2 $arg3 $arg4 $arg5
&amp; $Command $arg1 $arg2 $arg3 $arg4 $arg5
</code></pre>

I would like to encrypt a password in PowerShell and use it with <code>plink</code> and <code>putty</code>.
Yes, I know that it expects only cleartext password (<a href="https://stackoverflow.com/q/14822083/">Password encryption using SecureString for plink.exe command</a>).
No, I will not use generated keys because we don't support it.
My questions:
<ol>
<li>Any suggestions how can I use encrypted password for <code>-pw</code> flag in <code>putty</code> or <code>plink</code></li>
<li>Can I generate specific string as key? I mean taking current cleartext password and convert it to a key, then using it as <code>-i</code> instead of <code>-pw</code></li>
</ol>
My <code>securePass.ps1</code> code:
<pre><code>$password = read-host -prompt &quot;Enter your Password&quot; 
write-host &quot;$password is password&quot; 
$secure = ConvertTo-SecureString $password -force -asPlainText 
$bytes = ConvertFrom-SecureString $secure 
$bytes | out-file C:\encrypted_password1.txt
</code></pre>
In main:
<pre><code>$securePass = Get-Content C:\encrypted_password1.txt
$pass = $securePass | ConvertTo-SecureString
plink -batch -ssh $defUser@$srv -pw $pass
putty -ssh $defUser@$srv -pw $pass
</code></pre>

Use encrypted password for Plink/PuTTY

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我想在PowerShell中加密密码，并将其与plink和putty一起使用。是的，我知道它只需要明文密码()。不，我不会使用生成的密钥，因为我们不支持它。我的问题：任何建议如何在putty或plink中为putty标志使用加密密码我可以生成特定的字符串作为键吗？我的意思是使用当前的明文密码并将其转换为密钥，然后将其用...

问对Plink/PuTTY使用加密密码
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问对Plink/PuTTY使用加密密码EN