I am using openssh2.1.1p1, installed on a RedHat6.2 box. I am using a public domain nt client. All builds were clean, and I have followed/read all instructions (I think!). First problem: I wish to use RSA keys protected with a password. No rhosts. Unfortunately RSA fails, and I can only get in via a password. I get the following error: ============================= C:\ssh>ssh -l mklein -i keys\identity -v mother.vxappliance.com telnet mother SSH Version 1.2.14 [winnt-4.0-x86], protocol version 1.4. Standard version. Does not use RSAREF. ssh_connect: getuid 0 geteuid 0 anon 0 Connecting to mother.vxappliance.com [208.201.233.106] port 22. Connection established. Remote protocol version 1.99, remote software version OpenSSH_2.1.1 Waiting for server public key. Received server public key (768 bits) and host key (1024 bits). Host 'mother.vxappliance.com' is known and matches the host key. Initializing random; seed file C:\WINNT\Profiles\mklein/.ssh/random_seed IDEA not supported, using 3des instead. Encryption type: 3des Sent encrypted session key. Received encrypted confirmation. Trying RSA authentication with key '[EMAIL PROTECTED]' Server refused our key. Doing password authentication. Password: ============================= I used ssh-keygen to generate identity/identity.pub keys in my home\mklein\.ssh directory. I then copied identity to my client machine. I'm not sure what's up. Should I be using RSAref since I'm U.S.? Problem Two: When I try to connect from the box where openssh is actually running (my linux server) I get the following error: The authenticity of host 'mother.vxappliance.com' can't be established. RSA key fingerprint is 52:2a:2f:bf:ee:11:0f:69:24:5a:a2:c7:90:3c:b9:27. Are you sure you want to continue connecting (yes/no)? Selecting either yes/no has no affect here. I can verify that the fingerprint is the same, but this is wierd as the host can't validate itself essentially. I have no problems connecting from other machines, just not the host machine! thanks, mike