OpenSSH for Windows

    openssh.jpg

    The OpenSSH website is located at www.openssh.com


    This website hosts a Windows installer package of Openssh for Windows that is actively maintained and current.

    The sshwindows package hasn't been maintained for a long time and is woefully out of date.  I've been rolling my own versions of this installer for quite a while and figured others might find this useful as well.

    I'll walk you through installation and setup of the OpenSSH package for Windows. First download the latest version (or the version of your choice), and head to the bottom of the page for a quick walk-thru


    New Version

    OpenSSH 7.2p2-1-v1
    This is an updated OpenSSH 7.2p2-1-v1 installer (no changes to the version of OpenSSH) for both x86 and x64 binaries. I included an incorrect cygwin1.dll for x64 builds causing both ls.exe and mv.exe to fail.
    Version Windows x86 Windows x64
    OpenSSH 7.2p2-1-v1
    setupssh-7.2p2-1-v1.exe    new.jpg
    SHA1=4eff121021e5551dc762db3fb6d82ad9a989c2b5
    (Optional) Cygwin Source Files cygwin_source.32.72p2-1-v1.zip
    SHA1=50e22b1e6c365345e22c4b75f94a286d0557493f
    cygwin_source.64.72p2-1-v1.zip
    SHA1=1cfff3a5f65166652c02a8f5247fe9936efe9f85
    (Optional) Installer Source Files
    installer_source_files.72p2-1-v1.zip
    SHA1=9a4c14b4d0c2e89dbd1d7cc1030093525cb8b5e9

    Older Versions

    OpenSSH 7.2p2-1
    This is an updated OpenSSH 7.2p2-1 installer for both x86 and x64 binaries.
    Version Windows x86 Windows x64
    OpenSSH 7.2p2-1
    setupssh-7.2p2-1.exe
    SHA1=5cf36aa793c0116d9bba765ae6152531e14772f4
    (Optional) Cygwin Source Files cygwin_source.32.72p2-1.zip
    SHA1=982f7a1067da70928fb2cccc6fd5ada57a192734
    cygwin_source.64.72p2-1.zip
    SHA1=5070caf339ae81ab6379deee2696e84fe343d72e
    (Optional) Installer Source Files
    installer_source_files.72p2-1.zip
    SHA1=cbd868e9517ca4ef334f319e86c2099e04fc6e5b

    OpenSSH 7.2p1-1
    This is an updated OpenSSH 7.2p1-1 installer for both x86 and x64 binaries. I made a couple small tweaks - spaces are allowed in the service password and using large passwords should not cause a prompt.
    Version Windows x86 Windows x64
    OpenSSH 7.2p1-1
    setupssh-7.2p1-1.exe
    SHA1=a2b26af4613e66ca3d779c9bf1eb7f787ada6c69
    (Optional) Cygwin Source Files cygwin_source.32.72p1-1.zip
    SHA1=909e221c6d8c25937882650720b3f9489bef1322
    cygwin_source.64.72p1-1.zip
    SHA1=dc8dbb0c5cb068e733625625fbaecbbbd6312cac
    (Optional) Installer Source Files
    installer_source_files.72p1-1.zip
    SHA1=54f38a2fc84b5fb7c17316c0b54a057570248fe1

    OpenSSH 7.1p2-1
    This is an updated OpenSSH 7.1p1-1 installer for both x86 and x64 binaries. I also took this opportunity to clean up the files to only the minimal dependencies. Let me know if you run into any missing file warnings.
    Version Windows x86 Windows x64
    OpenSSH 7.1p2-1
    setupssh-7.1p2-1.exe
    SHA1=2f304d562e8b9c7c81c0fac80fa939c730165b53
    (Optional) Cygwin Source Files cygwin_source.32.71p2-1.zip
    SHA1=4de4bb82937b46bf8964b4c9a47b346dbac5eb54
    cygwin_source.64.71p2-1.zip
    SHA1=9a0f7b94e1686458e310dc72df8436e49d24c6a7
    (Optional) Installer Source Files
    installer_source_files.71p2-1.zip
    SHA1=6493ce40ac5c89df836fff128132e54a9cd0438e

    OpenSSH 7.1p1-1
    This is an updated OpenSSH 7.1p1-1 installer for both x86 and x64 binaries.
    Version Windows x86 Windows x64
    OpenSSH 7.1p1-1
    setupssh-7.1p1-1.exe
    SHA1=131e027050fb8b985f564e6b5c3b0d054d703dbb
    (Optional) Cygwin Source Files cygwin_source.32.71p1-1.zip
    SHA1=e5ba369adeb9edadae40a749373eb16ae9f1341a
    cygwin_source.64.71p1-1.zip
    SHA1=d94b3d9a56a7741aa130af6a7157b64ade0d9c40
    (Optional) Installer Source Files
    installer_source_files.71p1-1.zip
    SHA1=26d70ce5da4961b5a13af2aa3d5b9b384ad214be

    OpenSSH 6.9p1-1
    This is an updated OpenSSH 6.9p1-1 installer for both x86 and x64 binaries.
    Version Windows x86 Windows x64
    OpenSSH 6.9p1-1
    setupssh-6.9p1-1.exe
    SHA1=73ec3450a5afc3e76b14c76ace69ef76c3c525d2
    (Optional) Cygwin Source Files cygwin_source.32.69p1-1.zip
    SHA1=fd73fdb3aa8cc1d52a572f787bbc437ae17f312a
    cygwin_source.64.69p1-1.zip
    SHA1=9d2be6540677cfb70b9083c2cd0b0605a368aa2a
    (Optional) Installer Source Files
    installer_source_files.69p1-1.zip
    SHA1=a19a8facdae562032a8631d80df9b7366e717404

    OpenSSH 6.8p1-1
    This is an updated OpenSSH 6.8p1-1 installer for both x86 and x64 binaries. The cygwin Local Security Authority (/bin/cyglsa) is present but NOT yet installed as an authentication model. A copy is made of /etc/* to %TEMP%/etc.bak during uninstallation, and these files are copied back over the newly created /etc after upgrade or install so user changes are maintained (if you want a clean install, then this folder must be deleted prior to running the installer). A bug fix was made to the code that setup /var/empty in XP - cacls.exe is required to setup the directory. Fixed another small issue with the silent uninstalls so the '/S' is appended to the path when the uninstaller is invoked from the installer. Added support for installing x86 binaries on x64 (/x86=1 to force x86 install)
    Version Windows x86 Windows x64
    OpenSSH 6.8p1-1
    setupssh-6.8p1-1.exe
    SHA1=79e8395a2087131947588e831f4f4581292f906e
    (Optional) Cygwin Source Files cygwin_source.32.68p1-1.zip
    SHA1=c9e360629dc6e1c76b59d2c2607e34ccca3140d8
    cygwin_source.64.68p1-1.zip
    SHA1=68505a3a622db5ca910fc88bbe48b9934f1693f9
    (Optional) Installer Source Files
    installer_source_files.68p1-1.zip
    SHA1=ecf39432f347021779e0ff527ea216fbe7debe84

    OpenSSH 6.7p1-2
    This is an updated OpenSSH 6.7p1-2 installer for both x86 and x64 binaries. Includes a fix to setup the home directory for both the client and the server.
    Version Windows x86 Windows x64
    OpenSSH 6.7p1-2
    setupssh-6.7p1-2.exe
    SHA1=cbe930c4f9a6821fc25de714673ebf084f269692
    (Optional) Cygwin Source Files cygwin_source.32.67p1-2.zip
    SHA1=65c18d4405aadbbf7d8452920c778ce973ec490e
    cygwin_source.64.67p1-2.zip
    SHA1=48ec40060893a3159cc9cc6281dc8035855648c9
    (Optional) Installer Source Files
    installer_source_files.67p1-2.zip
    SHA1=f96b954049eaa19483cb98b495a072e51dceaffc

    OpenSSH 6.7p1-1-v1
    This is an updated OpenSSH 6.7p1-1-v1 installer for both x86 and x64 binaries. The OpenSSH version is the same as the prior release, a few other packages got version bumped. This release fixes two major issues - it localizes the Administrator account correctly during install for privilege seperation, and it sets up /var/empty correctly for privilege seperation (again, with a localized username and fixing the logic to work correctly). If your OpenSSH 6.7p1-1 is working OK for you, no need to redownload this version.
    Version Windows x86 Windows x64
    OpenSSH 6.7p1-1
    setupssh-6.7p1-1-v1.exe
    SHA1=e971d1c1f561a9a56ce7d959d291b318a03b1afa
    (Optional) Cygwin Source Files cygwin_source.32.67p1-1-v1.zip
    SHA1=63697d103ed896c7914cadeffa3debd807d8f90b
    cygwin_source.64.67p1-1-v1.zip
    SHA1=4f3bbc7e2f0f87f141c0864d1008c0eb0eecbdda
    (Optional) Installer Source Files
    installer_source_files.67p1-1-v1.zip
    SHA1=cf8d62a6758566f65e21b70df5a15ae92468add5

    OpenSSH 6.7p1-1
    This is an update to the latest OpenSSH 6.7p1-1 and OpenSSL 0.9.8zb and 1.0.1.i-1. There is also an updated BASH 4.1.17-9 (SHELLSHOCK bug fix is in 4.1.13-6 and greater).
    Version Windows x86 Windows x64
    OpenSSH 6.7p1-1
    setupssh-6.7p1-1.exe
    SHA1=8956cafe713f0486292d814b3089a741638bf5dd
    (Optional) Cygwin Source Files cygwin_source.32.67p1-1.zip
    SHA1=c5b27321b8834594a3533f41b2cde7f73fa1f494
    cygwin_source.64.67p1-1.zip
    SHA1=d245c80cb0e16e20b330c322ab3720ef92860bcf
    (Optional) Installer Source Files
    installer_source_files.67p1-1.zip
    SHA1=a81d04a7b2804d8425c5daa8d052a779a2f6916e

    OpenSSH 6.6.1p1-3
    This is an update to the latest OpenSSH 6.6.1p1-3 and OpenSSL 1.0.1.g-1 (this had been incorrectly marked as 1.0.1.h-1). The largest change is the combination of the 32 and 64 bit installations into a single binary - making maintenance easier for me. There are also a number of small bug fixes/feature requests in this version per user requests.
    1. Allow user requested key size during install
    2. Added support for silent installs: /S /CLIENTONLY=1 or /SERVERONLY=1
    3. Fixed uninstaller to support silent uninstalls
    4. Fixed how home diretory is stored in registry
    5. Fixed uninstall bug in resetting the PATH - handling case where OpenSSH was in the middle of the path
    6. This is a new build (7/26/2014) - nothing changed except it was built to support string lengths of 8192 (fixing a bug someone ran into with a very large path). If this worked OK for you and didn't corrupt your path, no need to re-download this rebuild.

    Version Windows x86 Windows x64
    OpenSSH 6.6.1p1-3
    setupssh-6.6.1p1-3.exe
    SHA1=6af0c09ce98b0fe1b5097aa2e85ffd5a7feb6e6c
    (Optional) Cygwin Source Files cygwin_source.32.661p1-3.zip
    SHA1=5348b991498208d9b90700f0f8ea15a2bebf57a5
    cygwin_source.64.661p1-3.zip
    SHA1=b0ac92af03d533f7d3ac52578a6053c4e6529d03
    (Optional) Installer Source Files
    installer_source_files.661p1-3.zip
    SHA1=80a6fd4de69274695fbcd2e55189f576bce87569

    OpenSSH 6.6p1-1-v1
    This is an update to OpenSSL 1.0.1g-1 to address the Heartbleed vulnerability (openssl is a crypt dependency, but not really used by openssh so this is not really relevant). The binaries for OpenSSH have stayed the same.
    Version Windows x86 Windows x64
    OpenSSH 6.6p1-1-v1 setupssh-6.6p1-1-v1.exe
    SHA1=d0f69206be1b310bf684db9e5a9909237ceac5ea
    setupssh-6.6p1-1-v1(x64).exe
    SHA1=ca4c70c55103bdf331224354092b0b57eec6b723
    (Optional) Cygwin Source Files cygwin_source.66p1-1-v1.zip
    SHA1=a0bdd8046332ebaf3c0d4c822b627bffa1e1e3a8
    cygwin_source.66p1-1-v1(x64).zip
    SHA1=e632e98625cdae7874583294af10951f08608a43
    (Optional) Installer Source Files installer_source_files.66p1-1-v1.zip
    SHA1=ebcf01fbabc07551d8ef80b4accb8052c0d9e39d
    installer_source_files.66p1-1-v1(x64).zip
    SHA1=de7a51634e9f7b83b9c05ad7a4b29f6c79ec48d3

    OpenSSH 6.6p1-1
    This is an update to the next released version of OpenSSH 6.6p1-1.
    Version Windows x86 Windows x64
    OpenSSH 6.6p1-1 setupssh-6.6p1-1.exe
    SHA1=5d1cc4e7ab4a27cb3e18dc3eb8e3f67e648f87bd
    setupssh-6.6p1-1(x64).exe
    SHA1=022454a1c3ff849e0bd01238a6ce8538c3358c9b
    (Optional) Cygwin Source Files cygwin_source.66p1-1.zip
    SHA1=27faac1867542a04b6d16a5960a72e16a0904933
    cygwin_source.66p1-1(x64).zip
    SHA1=612891b990e2e11ca07eb3be1f37681bc6dac4a6
    (Optional) Installer Source Files installer_source_files.66p1-1.zip
    SHA1=f650d49a358dace5e7fcffe3180b02c2456eda54
    installer_source_files.66p1-1(x64).zip
    SHA1=90c54d4a06b0a974b33e66ae7e97cd38f19c7198

    OpenSSH 6.5p1-1
    This is an update to the next released version of OpenSSH 6.5p1-1. Automatically installs/uninstalls firewall rules for openssh daemon. Uses different compression algorithm for more efficient size. Thanks to Simon for some recommended updates.
    Version Windows x86 Windows x64
    OpenSSH 6.5p1-1 setupssh-6.5p1-1.exe
    SHA1=5bc92aecbd16135920a5cf06196f2057668fbae2
    setupssh-6.5p1-1(x64).exe
    SHA1=670966f1a99081833e3c9a6cda2169ed0ab519a8
    (Optional) Cygwin Source Files cygwin_source.65p1-1.zip
    SHA1=b8ed2f5f1a5ce24661eb99d27a83baaccadf5079
    cygwin_source.65p1-1(x64).zip
    SHA1=d071e05fc143e6bb0815a23e76b71957b06a6277
    (Optional) Installer Source Files installer_source_files.65p1-1.zip
    SHA1=7a38dc326e87f60bb3cf725ad82f736c05868617
    installer_source_files.65p1-1(x64).zip
    SHA1=67e0a43820a24ddcfb7ce0eb3200384dc3182332

    OpenSSH 6.4p1-1
    This is an update to the next released version of OpenSSH 6.4p1-1.
    Version Windows x86 Windows x64
    OpenSSH 6.4p1-1 setupssh-6.4p1-1.exe setupssh-6.4p1-1(x64).exe
    (Optional) Cygwin Source Files cygwin_source.64p1-1.zip cygwin_source.64p1-1(x64).zip
    (Optional) Installer Source Files installer_source_files.64p1-1.zip installer_source_files.64p1-1(x64).zip

    OpenSSH 6.3p1-1
    This is an update to the next released version of OpenSSH 6.3p1-1. There are some minor installer tweaks as well.
    Version Windows x86 Windows x64
    OpenSSH 6.3p1-1 setupssh-6.3p1-1.exe setupssh-6.3p1-1(x64).exe
    (Optional) Cygwin Source Files cygwin_source.63p1-1.zip cygwin_source.63p1-1(x64).zip
    (Optional) Installer Source Files installer_source_files.63p1-1.zip installer_source_files.63p1-1(x64).zip

    OpenSSH 6.2p2-1-v1
    This is an update to the installer and fixes the issue with the shell being mismatched for ssh/sftp, creates the ecdsa key automatically, and provides updated ssh_config and sshd_config files.
    Version Windows x86 Windows x64
    OpenSSH 6.2-p2-1-v1 setupssh-6.2p2-1-v1.exe setupssh-6.2p2-1-v1(x64).exe
    (Optional) Cygwin Source Files cygwin_source.62p2-1.zip cygwin_source.62p1-2(x64).zip
    (Optional) Installer Source Files installer_source_files.62p2-1-v1.zip installer_source_files.62p2-1-v1(x64).zip

    OpenSSH 6.2p2-1
    This is an updated to the x86 and x64 binaries to the next released version.
    Version Windows x86 Windows x64
    OpenSSH 6.2-p2-1 setupssh-6.2p2-1.exe setupssh-6.2p2-1(x64).exe
    (Optional) Cygwin Source Files cygwin_source.62p2-1.zip cygwin_source.62p1-2(x64).zip
    (Optional) Installer Source Files installer_source_files.62p2-1.zip installer_source_files.62p2-1(x64).zip

    OpenSSH 6.2p1-2-v1
    This is a small version update to the x86 binaries, and provides the first release of an x64 OpenSSH version.
    Version Windows x86 Windows x64
    OpenSSH 6.2-p1-2 setupssh-6.2p1-2-v1.exe setupssh-6.2p1-2(x64)-v1.exe
    (Optional) Cygwin Source Files cygwin_source.62p1-2-v1.zip cygwin_source.62p1-2(x64)-v1.zip
    (Optional) Installer Source Files installer_source_files.62p1-2-v1.zip installer_source_files.62p1-2(x64)-v1.zip

    OpenSSH 6.2p1-2
    Updated OpenSSH version. This version adds a number of features and fixes to the code base, Silent (see navigation panel on the left for directions) installs being the newest feature. It also correctly implements sshd_server and privsep, fixes some bugs with writing some of the installation files, sets up the home link automatically, and streamlines the interface.
    Version Windows x86 Windows x64
    OpenSSH 6.2p1-2 setupssh-6.2p1-2.exe N/A
    (Optional) Cygwin Source Files cygwin_source.62p1-2.zip N/A
    (Optional) Installer Source Files installer_source_files.62p1-2.zip N/A

    OpenSSH 6.1p1-v2
    This version adds a number of features and fixes to the code base, Silent (scroll to bottom for directions) installs being the newest feature. It also correctly implements sshd_server and privsep, fixes some bugs with writing some of the installation files, sets up the home link automatically, and streamlines the interface.
    Version Windows x86 Windows x64
    OpenSSH 6.1p1-v2 setupssh-6.1p1-v2.exe N/A
    (Optional) Cygwin Source Files cygwin_source.61p1-v2.zip N/A
    (Optional) Installer Source Files installer_source_files.61p1-v2.zip N/A

    OpenSSH 6.1p1-v1
    Updated this version to fix a missing dependency with sftp (cygedit-0.dll)
    Version Windows x86 Windows x64
    OpenSSH 6.1p1-v1 setupssh-6.1p1-v1.exe N/A
    (Optional) Cygwin Source Files cygwin_source.61p1-v1.zip N/A
    (Optional) Installer Source Files installer_source_files.61p1-v1.zip N/A

    OpenSSH 6.1p1
    Update binaries to OpenSSH 6.1p1
    Version Windows x86 Windows x64
    OpenSSH 6.1p1 setupssh-6.1p1.exe N/A
    (Optional) Cygwin Source Files cygwin_source.61p1.zip N/A
    (Optional) Installer Source Files installer_source_files.61p1.zip N/A

    OpenSSH 6.0p1
    Update binaries to OpenSSH 6.0p1
    Version Windows x86 Windows x64
    OpenSSH 6.0p1 setupssh-6.0p1.exe N/A
    (Optional) Cygwin Source Files cygwin_source.60p1.zip N/A
    (Optional) Installer Source Files installer_source_files.60p1.zip N/A

    Once you've downloaded the executable, start it up to be greeted with the OpenSSH splash screen followed by the welcome and license screen.  You can select the defaults all the way through the installation process if desired - these should work for most intallations:

    The first point where you get to make some choices is the choose component dialog.

    setup.jpg

    Select
        Client - to install the ssh client command line tools (if you want to connect to other ssh servers
        Server - to install the ssh server command line application (if you want to provide an ssh server for others to connect to)
        Start Menu Shortcuts - a few start menu shortcuts

    The next screen that requires some explanation is the "Choose account under which to execute SSHD".  The SSH Daemon (SSHD) can run as either Local_System or SSHD_Server.  If you are using Windows Server (2003/2008/2008R2/etc.) you will likely have to run this as SSHD_Server, however all others should be able to run this as Local_System.  The default password that is filled in for you is "D0ntGu3$$M3" - I would recommend changing it!  You can change this later by using the Services Control Panel.

    localsystem.jpg

    If you choose "Run as SSHD_Server", then you will be presented with the privilege seperation option.
    In general, it should be OK to not use priviledge seperation unless you are running Windows 2003.

    privsep.jpg


    If you are running the sshd server, select the port.  The default port for ssh is 22, however you may select whatever you want (but then you'll have to pass that in as on -p option when you connect)

    port.jpg


    You may now select the keysize.  The default keysize of 2048 is probably sufficient, however if you are truly concerned about your network privacy 4096 would be a good next choice.

    keysize.jpg

    You can configure ssh for either local users or domain users.  This determines how the password file is setup and you should probably choose Local users.

    passwordgroup.jpg


    OpenSSH will begin to install and configure itself for your system.

    At this point, openssh is setup and configured for your system.  To try this out, open up a command prompt (cmd.exe) and try:
            ssh -v       (For OpenSSH 6.3 and below)
            ssh -V       (For OpenSSH 6.4 and above)
    which will show you the version information.

    sshv.jpg

    If you installed the openssh server, it will start automatically after the installation completes.  


    You may also open up a command prompt with administrator priviledges and try:
            net start opensshd
    which should cause the opensshd daemon service to start
    sshd-netstart.jpg
    To stop the service (if/when you want to):
            net stop opensshd
    You can also stop/start the openssh service from the Services control panel applet.

    If you experience problems with the service, look in /var/log as it might have a clue why the service is failing to start.



    The original source code for sshwindows came from SourceForge.net.