By Manny Fernandez

May 17, 2020

Converting a PPK file to a PEM file

Have you ever had someone deploy a device in AWS and they chose the .PPK option to save the key.  Then you need to retrieve the administrator password but you require a .PEM file instead?  Here is a quick way to do it.  I run homebrew on my MacBook.  If you run macOS X and you are not running homebrew, check out this article.  I updated the article to show the reverse as well.

Install PuTTY

The first thing you will need to do is install putty.  If you are running Homebrew run the following command.

brew install putty

2020-05-17_00-26-23.png

If you are running Linux, then you can use

You can use either yum or apt depending on your distro.

yum install putty or apt-get install putty

2020-05-17_07-32-37

Now Convert the PPK to PEM

puttygen monkey.ppk -O private-openssh -o monkey.pem

2020-05-17_00-29-40.png

Getting the Password in AWS

Although this is more than the PPK to PEM, I decided to update the article to show the process of using said .PEM file to retrieve the password

Screen Shot 2020-05-17 at 8.07.14 AM

By right clicking on the instance, you can click Get Windows Password

2020-05-17_08-01-19

I blocked out the Key Name but the key name would be displayed.  It will then ask you for your .pem file.

2020-05-17_08-03-20

Once you enter the .pem file and choose Decrypt Password you should see your password.

Going the Other Way (PEM to PPK)

If you need it the other way “pem to ppk” you can use the following command:

sudo puttygen monkey.pem -o monkey.ppk -O private

Hope this helps

 

Recent posts

  • If you've spent any time configuring user authentication on... Full Story

  • DNS is one of those technologies that quietly underpins... Full Story

  • BGP issues on FortiGate firewalls usually trace back to... Full Story

  • Every time your laptop talks to your router, a... Full Story

  • If you've spent any time configuring NAT on a... Full Story

  • If you have spent any time configuring firewall policies... Full Story

  • High availability on FortiGate is one of those features... Full Story

  • If you've configured SD-WAN on a FortiGate, you've almost... Full Story

  • FortiLink is the management protocol that turns a FortiSwitch... Full Story

  • FortiSwitches are pretty rock solid from Mean Time Between... Full Story

  • This is a quicky tip.  Have you ever gone... Full Story

  • DNS is one of those quiet pieces of internet... Full Story

  • This article is an updated version of the previous... Full Story

  • You will add ns2 as a secondary (slave) BIND9... Full Story

  • In the process of deploying my lab, I needed... Full Story

  • RFC 8805, used to be known as Self-Correcting IP... Full Story

  • Years back, I wrote an article about certificate pinning. ... Full Story

  • FortiGates have the ability to send alerts to Microsoft... Full Story

  • In this post, I am going to walk through... Full Story

  • Troubleshooting VoIP on a FortiGate can feel like trying... Full Story

  • Prior to FortiOS 7.0, there were three commands to... Full Story

  • In this post, I am going to go over... Full Story

  • What we are going to do:  We are going... Full Story

  • Choosing between FGCP (FortiGate Clustering Protocol) and FGSP (FortiGate... Full Story

  • Creating a VLAN on macOS (The "Pro" Move) A... Full Story

  • This blog post explores the logic behind how macOS... Full Story

  • Pretty Fly for a Wi-Fi Tell My Wi-Fi Love... Full Story

  • Part of my daily gig is creating BoMs (Bill-of-Materials)... Full Story

  • ICMP introduces several security risks, but careful filtering, rate... Full Story

  • The command diag debug application dhcps -1 enables full... Full Story

  • In the world of FortiOS, execute tac report is... Full Story

  • LLDP; What is it The Link Layer Discovery Protocol... Full Story

  • What it actually does When you run diagnose fdsm... Full Story

  • Monkey Bites are bite-sized, high-impact security insights designed for... Full Story

  • I have run macOS in macOS with Parallels but... Full Story

  • Don't be confused with my other FortiNAC posts where... Full Story

  • This is the third session in a multi-part article... Full Story

  • Today I was configuring key-based authentication on a FortiGate... Full Story

  • Netcat, often called the "Swiss Army knife" of networking,... Full Story

  • At its core, IEEE 802.1X is a network layer... Full Story

  • In case you did not see the previous FortiNAC... Full Story

  • This is our 5th session where we are going... Full Story

  • Now that we have Wireshark installed and somewhat configured,... Full Story

  • The Philosophy of Packet Analysis Troubleshooting isn't about looking... Full Story

  • OSPF (Open Shortest Path First) is a link-state IGP... Full Story

  • 1. High-Level Overview The FortiGate Wireless Intrusion Detection System... Full Story

  • What MIMO Actually Does Multiple Input, Multiple Output (MIMO)... Full Story