(VBScript) SSH HSM Public Key Authentication

Demonstrates how to authenticate with an SSH server using public key authentication using an HSM (USB token or smartcard).

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Dim fso, outFile
Set fso = CreateObject("Scripting.FileSystemObject")
'Create a Unicode (utf-16) output text file.
Set outFile = fso.CreateTextFile("output.txt", True, True)

' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' Note: Chilkat's PKCS11 implementation runs on Windows, Linux, MacOs, and other supported operating systems.

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Pkcs11")
set pkcs11 = CreateObject("Chilkat.Pkcs11")

' This would be a path to a .dylib on MacOS, or a path to a .so shared lib on Linux.
pkcs11.SharedLibPath = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"
pin = "0000"
userType = 1

' Establish a PKCS11 logged-on session using the driver (.so, .dylib, or .dll) as specified in the SharedLibPath above.
success = pkcs11.QuickSession(userType,pin)
If (success = 0) Then
    outFile.WriteLine(pkcs11.LastErrorText)
    WScript.Quit
End If

' Set PKCS11 attributes to find our desired private key object.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.JsonObject")
set json = CreateObject("Chilkat.JsonObject")
success = json.UpdateString("class","private_key")
success = json.UpdateString("label","MySshKey")

' Get the PKCS11 handle to the private key located on the HSM.
priv_handle = pkcs11.FindObject(json)

' Get the PKCS11 handle to the corresponding public key located on the HSM.
success = json.UpdateString("class","public_key")

pub_handle = pkcs11.FindObject(json)

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.SshKey")
set key = CreateObject("Chilkat.SshKey")
' The key type can be "rsa" or "ec"
keyType = "rsa"
success = key.UsePkcs11(pkcs11,priv_handle,pub_handle,keyType)
If (success = 0) Then
    outFile.WriteLine(key.LastErrorText)
    WScript.Quit
End If

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Ssh")
set ssh = CreateObject("Chilkat.Ssh")

success = ssh.Connect("example.com",22)
If (success <> 1) Then
    outFile.WriteLine(ssh.LastErrorText)
    WScript.Quit
End If

' Authenticate with the SSH server using the login and
' HSM private key.  (The corresponding public key should've 
' been installed on the SSH server beforehand.)
success = ssh.AuthenticatePk("myLogin",key)
If (success <> 1) Then
    outFile.WriteLine(ssh.LastErrorText)
    WScript.Quit
End If

outFile.WriteLine("Public-Key Authentication Successful!")

outFile.Close