There's some logic that I'm not following whenever my organization sets up VMs for SSH access. Perhaps someone can help me understand.
Our process is currently as follows
- Generate Keypair on Linux Server (EC2 instance)
- Copy id_rsa (the private key) to Windows system.
- Use Putty's keygen to convert to generate a PPK key file from that private key. Then connect to putty with that key file.
But wouldn't it be more secure to generate the keys on the Windows system, connect to our server and add the windows public key to the authorized_key file? Am I missing something?