Meta tags:
Headings (most frequently used words):
security, enable, keys, os, login, console, gcloud, with, and, on, vm, enabled, stay, organized, collections, save, categorize, content, based, your, preferences, before, you, begin, limitations, connect, to, using, key, what, next, rest, for, all, vms, in, project, single, third, party, tools, products, pricing, support, resources, engage,
Text of the page (most frequently used words):
the (177), vms (122), and (117), create (117), for (92), with (83), troubleshoot (62), keys (61), about (60), #security (56), google (52), use (51), instance (51), using (50), cloud (48), manage (47), you (47), ssh (47), disk (43), server (40), compute (39), view (39), your (37), set (36), configure (36), connect (36), enable (36), disks (35), windows (34), mig (33), key (31), from (31), overview (31), performance (30), that (29), login (27), reservation (27), engine (26), access (25), machine (24), command (23), gcloud (23), metadata (23), instances (22), configuration (21), oslogin (21), hyperdisk (21), sql (21), add (20), monitor (20), images (20), console (19), linux (19), network (19), gpu (18), resources (17), image (17), policies (16), directory (16), private (16), reservations (16), files (15), cli (15), virtual (15), snapshots (15), groups (15), recommendations (15), persistent (14), true (14), workload (14), creation (14), host (14), load (14), apply (14), custom (14), import (13), service (13), management (13), bulk (13), microsoft (13), cluster (13), application (12), enabled (12), install (12), storage (12), sole (12), availability (12), best (12), regional (12), all (11), ip_address (11), list (11), project (11), click (11), attached (11), based (11), type (11), delete (11), practices (11), workloads (11), stateful (11), support (10), dryrun (10), address (10), run (10), authentication (10), account (10), time (10), migs (10), machines (10), migrate (10), logs (10), zones (10), this (9), print (9), following (9), default (9), str (9), tools (9), optimized (9), update (9), licenses (9), managed (9), tenant (9), multiple (9), openshift (9), shutdown (9), start (9), hpc (9), samples (8), license (8), connecting (8), email (8), user_key (8), args (8), username (8), key_files (8), have (8), get (8), workstation (8), file (8), can (8), physical (8), single (8), field (8), enter (8), cpu (8), resource (8), optimize (8), internal (8), choose (8), disaster (8), recovery (8), high (8), agent (8), existing (8), guest (8), boot (8), h4d (8), flexibility (8), dns (8), tpu (8), thumb (7), without (7), name (7), mode (7), authenticate (7), api (7), must (7), uses (7), when (7), environment (7), networking (7), commitments (7), startup (7), balancing (7), benchmark (7), manually (7), idle (7), addresses (7), request (7), scale (7), deploy (7), back (7), mysql (7), zonal (7), remove (7), maintenance (7), templates (7), snapshot (7), backup (7), third (6), terms (6), events (6), code (6), information (6), more (6), page (6), are (6), send (6), how (6), external (6), parser (6), security_keys (6), build (6), key_file (6), used (6), perform (6), note (6), accounts (6), later (6), types (6), operating (6), systems (6), identity (6), local (6), options (6), available (6), usage (6), migration (6), data (6), updates (6), instant (6), nested (6), gpus (6), across (6), applications (6), group (6), demand (6), pools (6), failover (6), extension (6), change (6), new (6), transfer (6), customized (6), spot (6), understand (5), details (5), help (5), want (5), return (5), credentials (5), path (5), associated (5), client (5), running (5), party (5), container (5), ubuntu (5), region (5), zone (5), monitoring (5), databases (5), errors (5), future (5), drivers (5), virtualization (5), nvidia (5), operations (5), placement (5), node (5), highly (5), multi (5), modify (5), capacity (5), schedules (5), audit (5), symphony (5), scripts (5), manager (5), between (5), enhanced (5), capabilities (5), stop (5), tenancy (5), restore (5), regions (5), control (5), faq (5), flex (5), português (4), español (4), sign (4), join (4), see (4), down (4), need (4), don (4), script (4), add_argument (4), info (4), check (4), profile (4), user (4), save (4), python (4), retrieves (4), configures (4), device (4), has (4), browser (4), workstations (4), value (4), item (4), services (4), apis (4), development (4), provider (4), plan (4), product (4), distributed (4), issues (4), bandwidth (4), tcp (4), pmu (4), number (4), ssd (4), share (4), projects (4), upgrade (4), live (4), autoscaling (4), cross (4), requests (4), calendar (4), metrics (4), health (4), active (4), clusters (4), containers (4), database (4), postgresql (4), extensions (4), work (4), suspend (4), location (4), resize (4), graceful (4), locations (4), plans (4), replication (4), review (4), bound (4), system (3), products (3), other (3), content (3), registered (3), apache (3), organization (3), optional (3), flag (3), connection (3), main (3), store (3), argparse (3), https (3), none (3), make (3), retrieve (3), def (3), append (3), template (3), only (3), first (3), vm_name (3), connections (3), edit (3), doesn (3), sles (3), documentation (3), rest (3), general (3), specific (3), guides (3), infrastructure (3), observability (3), analytics (3), automatic (3), troubleshooting (3), encryption (3), pro (3), serial (3), configurations (3), patterns (3), higher (3), discounts (3), cuds (3), manual (3), scalable (3), resilient (3), autoscale (3), balancer (3), prevent (3), policy (3), testing (3), ibm (3), spectrum (3), deploying (3), during (3), prepare (3), deployment (3), rhel (3), protect (3), certificates (3), query (3), state (3), disable (3), properties (3), increase (3), schedule (3), lifecycle (3), design (3), size (3), non (3), pool (3), move (3), creating (3), series (3), tpus (3), 한국어 (2), 日本語 (2), עברית (2), brasil (2), italiano (2), indonesia (2), français (2), américa (2), latina (2), deutsch (2), english (2), action (2), site (2), youtube (2), center (2), started (2), pricing (2), sample (2), last (2), updated (2), 2026 (2), utc (2), licensed (2), under (2), feedback (2), learn (2), next (2), specify (2), primary (2), script_name (2), replace (2), turn (2), off (2), execute (2), subprocess (2), over (2), ssh_command (2), write_ssh_key_files (2), com (2), docs (2), please (2), not (2), any (2), write (2), posixaccounts (2), sure (2), configured (2), users (2), discovery (2), googleapiclient (2), bool (2), remote (2), extend (2), returns (2), hostname (2), index (2), google_sk_ (2), which (2), library (2), haven (2), already (2), applies (2), before (2), beta (2), tool (2), yourself (2), section (2), output (2), supports (2), lts (2), version (2), one (2), idp (2), federated (2), after (2), generate (2), pre (2), sdk (2), languages (2), frameworks (2), costs (2), industry (2), solutions (2), hybrid (2), multicloud (2), pipelines (2), hosting (2), quota (2), commitment (2), consumption (2), standard (2), full (2), registration (2), export (2), port (2), collecting (2), nodes (2), report (2), arm (2), core (2), rdp (2), app (2), latency (2), analyze (2), visible (2), cores (2), automatically (2), committed (2), generation (2), underutilized (2), insights (2), utilization (2), globally (2), web (2), autohealing (2), iis (2), shared (2), reserve (2), autoscaler (2), autoscalers (2), activity (2), kubernetes (2), place (2), setting (2), redis (2), cloning (2), writer (2), always (2), alwayson (2), volumes (2), method (2), synchronization (2), global (2), switch (2), byol (2), payg (2), byos (2), changes (2), families (2), guide (2), securing (2), event (2), simulate (2), topology (2), together (2), repairs (2), repair (2), failures (2), suspended (2), stopped (2), target (2), distribution (2), cancel (2), once (2), limit (2), interfaces (2), ipv6 (2), static (2), decrease (2), basic (2), consistent (2), scoped (2), copy (2), appliances (2), asynchronous (2), throughput (2), encrypt (2), names (2), format (2), mount (2), memory (2), extreme (2), balanced (2), through (2), advanced (2), rdma (2), created (2), preemptible (2), provisioning (2), models (2), rtx (2), vws (2), constraints (2), accelerator (2), reference (2), technology (2), areas (2), close (2), subscribe, newsletter, our, decade, climate, cookies, privacy, tech, twitter, blog, engage, training, certification, architecture, getting, github, status, release, notes, community, forums, contact, sales, marketplace, easy, easytounderstand, solved, problem, solvedmyproblem, otherup, hard, hardtounderstand, incorrect, incorrectinformationorsamplecode, missing, missingtheinformationsamplesineed, otherdown, tell, except, otherwise, noted, java, trademark, oracle, its, affiliates, developers, creative, commons, attribution, step, verification, what, runs, python3, optionally, parse_args, store_true, false, dest, rawdescriptionhelpformatter, formatter_class, __doc__, description, argumentparser, __main__, __name__, call, else, compose, does, assigned, securitykeys, posix, security_key, getloginprofile, v1beta, object, expanduser, dry, usually, strings, construct, given, 0o600, chmod, privatekey, open, enumerate, paths, saved, will, stored, dictionaries, representing, retrieved, saves, into, inside, specified, naming, dict, typing, connects, pip3, terminal, example, prompted, touch, row, instead, continue, include, required, libraries, such, libfido2, grep, rocky, suse, enterprise, debian, both, openssh, shell, accept, limitations, verifies, selecting, provide, installed, previously, latest, components, init, installation, initialize, select, tab, begin, document, describes, feature, subject, offerings, features, might, limited, launch, stage, descriptions, preview, categorize, preferences, stay, organized, collections, home, concurrent, operation, renewal, nvme, resizing, common, pay, viewing, diagnostic, sudoers, screenshots, bug, blackwell, soft, lockups, bus, locks, rescue, inaccessible, dumps, kernel, panic, fstab, unresponsive, suspension, reboots, shutdowns, connectivity, tips, nics, dpdk, improve, resiliency, communication, reduce, compact, idpf, interface, irdma, driver, nic, customize, threads, per, sustained, merge, split, renew, purchase, cost, savings, dynamic, overcommit, cpus, floating, reliable, udp, backends, routing, scaling, consuming, consume, combine, cud, allow, sharing, decisions, signals, serving, predictions, organize, labels, replica, states, observe, reports, tensorflow, inference, tensorrt5, learning, monte, carlo, methods, spark, forwarding, others, integrate, clustering, exchange, 2016, sharepoint, strategies, passive, inactive, setups, built, integrations, validation, were, deployed, transition, test, hammerdb, bucket, aws, ec2, pacemaker, s2d, block, netapp, hot, standby, drbd, architectures, mailjet, mailgun, sendgrid, sending, blue, green, deployments, lamp, joomla, asp, net, interactive, mongodb, flask, terraform, servers, mtls, random, generator, virtio, rng, accurate, protocol, ntp, els, restrictions, packages, deprecate, versions, family, trusted, red, hat, knowledgebase, functionality, risks, vpc, controls, confidential, kek, secure, expiration, shielded, attributes, predefined, handle, notices, process, faulty, unmanaged, affect, preserved, alternate, fails, repairing, maintain, upgrades, override, selectively, applying, accelerate, out, outage, rebalance, reenable, proactive, redistribution, shape, distribute, define, accidental, deletion, spread, rename, reset, resume, restart, referrers, source, uuid, recover, corrupted, duplicate, clones, alerts, backups, vss, regionally, different, protection, considerations, synchronous, consistency, failback, replicate, provisioned, iops, limits, evaluate, settings, kms, customer, supplied, symbolic, links, practice, ram, attach, additional, exapools, verify, ptr, record, failure, rates, tags, restrict, automate, password, require, powershell, sac, securely, apps, root, vpn, bastion, iap, networks, within, iso, imported, prerequisites, importing, exporting, bring, own, detach, reattach, constraint, accounting, provision, examples, slurm, reserved, team, slice, slices, adds, scenarios, deterministic, base, requirements, ready, aci, preempted, historical, alternative, similar, displays, ops, logging, subnet, public, gpudirect, ultra, minimum, platform, quickstarts, iam, roles, permissions, office, licensing, premium, strategy, gemini, bare, metal, accelerators, platforms, scores, purpose, discover, free, skip,
Text of the page (random words):
were deployed on vms during vm creation openshift workloads openshift on google cloud overview plan for openshift on google cloud overview of cluster services for openshift automatic configuration validation for openshift clusters built in integrations for openshift best practices for high availability with openshift disaster recovery for openshift on google cloud disaster recovery strategies for active passive and active inactive setups with openshift microsoft windows windows workloads best practices for windows server vms setting up active directory best practices for running active directory on google cloud deploy microsoft sharepoint server on compute engine deploying microsoft exchange server 2016 on compute engine windows server perform an in place upgrade of windows server run windows server failover clustering ibm spectrum symphony integrate ibm spectrum symphony with google cloud install the compute engine symphony provider install the google kubernetes symphony provider troubleshoot ibm spectrum symphony others load testing distributed load testing using kubernetes ssh port forwarding and load testing analytics monte carlo methods using apache spark machine learning run tensorflow inference workloads with tensorrt5 and nvidia t4 gpu monitor monitor logs view audit logs view usage reports view compute engine operations migrate from activity logs to audit logs view activity logs monitor resources monitor vm and sole tenant node usage observe and monitor vms monitor gpu performance monitor gpu performance on linux vms monitor gpu performance on windows vms monitor disks monitor disk health monitor the replica states of regional disks monitor disks list of metrics for pools monitor pools monitor reservations organize resources using labels scale autoscale groups of vms about autoscaling groups of vms create and manage autoscalers scale based on cpu utilization scale based on predictions scale based on load balancing serving capacity scale based on monitoring metrics scale based on schedules use an autoscaling policy with multiple signals manage autoscalers understand autoscaler decisions view autoscaler logs autoscale node groups reserve vm capacity choose a reservation type sharing reservations best practices for shared reservations allow a project to share reservations on demand reservations about on demand reservations create an on demand reservation for a single project for multiple projects combine an on demand reservation with a cud modify an on demand reservation delete an on demand reservation future reservations about future reservations create a reservation request for a single project for multiple projects modify a reservation request delete a reservation request future reservations in calendar mode about future reservations in calendar mode create a reservation request in calendar mode delete a reservation request in calendar mode view reservations or reservation requests consume a reservation prevent vms from consuming reservations load balancing about load balancing and scaling add an instance group to a load balancer request routing to a multi region external https load balancer cross region load balancing for microsoft iis backends set up internal tcp udp load balancing build reliable and scalable applications use autohealing for highly available applications use load balancing for highly available applications use autoscaling for highly scalable applications globally autoscale a web service on compute engine patterns for scalable and resilient applications patterns for using floating ip addresses on compute engine optimize resource utilization use recommendations to manage resources apply machine type recommendations to vms configure machine type recommendations apply machine type recommendations to migs view and apply idle resources recommendations view and understand vm insights view and understand mig insights manage idle vm recommendations idle vm recommendations overview view and apply idle vm recommendations configure idle vm recommendations manage reservation recommendations reservation recommendations overview view and apply idle reservation recommendations view and apply underutilized reservation recommendations configure idle reservation recommendations configure underutilized reservation recommendations overcommit cpus on sole tenant vms manual live migration about manual live migration manually live migrate vms share sole tenant node groups next generation dynamic resource management cost savings get discounts for committed usage about commitments and committed use discounts cuds resource based cuds purchase resource based commitments without attached reservations with attached reservations for os licenses manage resource based commitments renew commitments automatically extend commitment terms merge and split commitments upgrade commitments share resource based cuds across projects get discounts for sustained usage disk performance optimize hyperdisk performance optimize persistent disk performance optimize local ssd performance workload performance set the number of threads per core customize the number of visible cpu cores analyze the cpu performance using the pmu pmu overview enable the pmu in vms manage the pmu in vms network performance network bandwidth use google virtual nic use irdma network driver use idpf network interface configure a vm with higher bandwidth reduce latency by using compact placement policies optimize tcp network communication optimize tcp network performance optimize tcp network resiliency benchmark higher bandwidth vms optimize app latency with load balancing use dpdk to improve network performance network performance and gpu vms networking and gpu machines use higher network bandwidth patterns for using multiple host nics troubleshoot general tips troubleshoot connectivity troubleshoot rdp troubleshoot ssh troubleshoot os login troubleshoot vms troubleshoot vm operations troubleshoot vm creation troubleshoot resource availability errors troubleshoot bulk api vm creation troubleshoot vm reboots and shutdowns troubleshoot vm suspension troubleshoot vm updates troubleshoot unresponsive vms troubleshoot vm startup troubleshoot fstab errors troubleshoot kernel panic collecting core dumps rescue an inaccessible vm troubleshoot cpu bus locks troubleshoot cpu soft lockups troubleshoot vm configurations troubleshoot arm vms troubleshoot gpu vms troubleshoot nvidia gpu errors generate a nvidia bug report for blackwell gpus troubleshoot nested virtualization troubleshoot using vm screenshots troubleshoot sole tenant nodes troubleshoot vm performance issues troubleshoot sudoers files troubleshoot windows vms troubleshoot windows vms collecting diagnostic information troubleshoot using the serial console troubleshoot using the serial console viewing serial port output troubleshoot instance groups troubleshoot managed instance groups migs troubleshoot os management troubleshoot licenses troubleshoot image import and export troubleshooting sles pay as you go registration troubleshooting ubuntu pro registration troubleshoot metadata server troubleshoot metadata server troubleshoot networking issues troubleshoot common networking issues troubleshoot network drivers troubleshoot vm performance issues troubleshoot storage troubleshoot disk creation troubleshoot full disks and disk resizing troubleshoot disk encryption troubleshoot nvme disks troubleshoot instant snapshots troubleshoot standard snapshots troubleshoot reservations and commitments troubleshoot reservation creation troubleshoot reservation consumption troubleshooting reservation monitoring troubleshoot reservation updates troubleshoot future reservation creation and updates troubleshoot automatic commitment renewal troubleshoot quota errors troubleshoot concurrent operation quota errors troubleshoot workload authentication troubleshoot default service accounts troubleshoot workload to workload authentication ai and ml application development application hosting compute data analytics and pipelines databases distributed hybrid and multicloud industry solutions migration networking observability and monitoring security storage access and resources management costs and usage management infrastructure as code sdk languages frameworks and tools home documentation compute compute engine guides send feedback enable security keys with os login stay organized with collections save and categorize content based on your preferences preview this product or feature is subject to the pre ga offerings terms in the general service terms section of the service specific terms pre ga products and features are available as is and might have limited support for more information see the launch stage descriptions this document describes how to use the physical security keys registered in your google account to connect to virtual machine vm instances that use os login physical security keys are used to generate private ssh key files for connecting to vms when you use the google cloud console ssh in browser tool or the google cloud cli to connect to vms using security keys os login retrieves the private ssh key file associated with your security key and configures the ssh key file for you when you use third party tools to connect you must use the os login api to retrieve the ssh key information and configure the ssh key file yourself before you begin add a security key to your google account set up os login if you haven t already set up authentication authentication verifies your identity for access to google cloud services and apis to run code or samples from a local development environment you can authenticate to compute engine by selecting one of the following options select the tab for how you plan to use the samples on this page console when you use the google cloud console to access google cloud services and apis you don t need to set up authentication gcloud install the google cloud cli after installation initialize the google cloud cli by running the following command gcloud init if you re using an external identity provider idp you must first sign in to the gcloud cli with your federated identity note if you installed the gcloud cli previously make sure you have the latest version by running gcloud components update set a default region and zone rest to use the rest api samples on this page in a local development environment you use the credentials you provide to the gcloud cli install the google cloud cli if you re using an external identity provider idp you must first sign in to the gcloud cli with your federated identity for more information see authenticate for using rest in the google cloud authentication documentation limitations vms that have security keys enabled only accept connections from ssh keys that are attached to the physical security keys registered in your google account you can t use cloud shell to connect to vms that have security keys enabled both the vm you re connecting to and the workstation you re connecting from must use a version of openssh 8 2 or later that supports security key ssh types the following compute engine vm operating systems support security keys debian 11 or later suse linux enterprise server sles 15 or later ubuntu 20 04 lts or later container optimized os 93 lts or later rocky linux 9 or later to check if your environment supports security keys run the following command ssh q key grep sk if the command doesn t return any output your environment doesn t support security keys the ssh client on the workstation you re connecting from must support security keys and include the required libraries such as libfido2 note service accounts continue to connect to vms without using security keys if you are connecting from a service or application that doesn t support security keys connect to the vm as a service account enable security keys with os login you can enable use of security keys for all vms that use os login in your project or for single vms enable security keys for all os login enabled vms in a project to enable security keys on all vms that use os login in your project use the google cloud console or the gcloud cli console to enable security keys for all os login enabled vms use the google cloud console to set enable oslogin and enable oslogin sk to true in project metadata go to the metadata page go to metadata click edit click add item in the key field enter enable oslogin in the value field enter true click add item in the key field enter enable oslogin sk in the value field enter true click save gcloud to enable security keys for all os login enabled vms use the gcloud compute project info add metadata command to set enable oslogin true and enable oslogin sk true in project metadata gcloud compute project info add metadata metadata enable oslogin true enable oslogin sk true enable security keys on a single os login enabled vm to enable security keys on a vm that uses os login use the google cloud console or the gcloud cli console to enable security keys on a single vm use the google cloud console to set enable oslogin and enable oslogin sk to true in instance metadata go to the vm instances page go to vm instances click the name of the vm you want to enable security keys for click edit in the metadata section click add item in the key field enter enable oslogin in the value field enter true click add item in the key field enter enable oslogin sk in the value field enter true click save gcloud to enable security keys on a single vm use the gcloud compute instances add metadata command to set enable oslogin true and enable oslogin sk true in instance metadata gcloud compute instances add metadata vm_name metadata enable oslogin true enable oslogin sk true replace vm_name with the name of your vm connect to a vm using a security key you can connect to a vm that uses security keys using the google cloud console the gcloud cli or third party tools if you connect to vms using the google cloud console or the gcloud cli compute engine configures your ssh key for you if you connect to vms using third party tools you must perform the configuration yourself note vms that have security keys enabled don t support gcloud cli connections from windows workstations connect using the google cloud console or third party tools instead console when you connect to vms using the google cloud console ssh in browser tool ssh in browser retrieves the private keys associated with your security keys note the private key file can t be used to access your vm without physical access to your security key device to connect to a vm that has security keys enabled do the following in the google cloud console go to the vm instances page in the list of vms click ssh in the row of the vm that you want to connect to when prompted touch your security key gcloud when you connect to vms using the gcloud cli the gcloud cli retrieves the private keys associated with your security keys and configures the private key ...
|
