FAQ Mesogip

How to configure a first-time installation?

See: 2025-05-09-conf_mesogip_users_en

Mesogip connection problems: SSH key no longer seems to work?

When attempting to connect to mesogip_internal or mesogip_external, if the system successively prompts you for passwords for istanbul.ensta.fr and then for 10.10.0.1, as shown below:

ssh mesogip_internal 
login@istanbul.ensta.fr's password: 
ensta-login@10.10.0.1's password: 

This indicates a problem with SSH key authentication. Normally, the connection to 10.10.0.1 (Mesogip) should use your SSH key and not ask for a password.

Probable cause: SSH certificates have a limited validity period. If your certificate has expired, it must be renewed.

Solution: Update the SSH certificate

1. Go to the Mesogip SSH key management platform.
2. Locate the section corresponding to your certified public key (id_rsa_mesogip-cert.pub). The content of this key typically starts with ssh-rsa-cert-v01@openssh.com (or a similar variant indicating a certificate).
3. Click the “Enable/Extend” button to extend the validity of your certificate. Warning: This action generates a new certificate for your key.
4. The new certificate content will be displayed. Copy the entire new certificate.
5. Open the ~/.ssh/id_rsa_mesogip-cert.pub file on your local machine.
6. Replace the old content of the file with the new certificate you just copied.
7. Save the changes and close the file.

Your certified SSH key is now reconfigured and valid for a new period (usually one year). You should be able to connect to Mesogip without being asked for a password for 10.10.0.1.