SSH Public Key Setup

tilde@Cornell requires your SSH public key for account approval and secure login.

Verify the tilde@Cornell SSH Server

Before entering the join password, make sure SSH shows the correct tilde@Cornell server fingerprint.

The correct ED25519 host key fingerprint is:

SHA256:exVqibU+dnNf+O8MxNX75oqAoFNk+pfy7Azv0sk6sgE root@cornell-tilde (ED25519)

If SSH shows a different fingerprint, do not continue. Your network may be redirecting cornelltilde.com, especially on school or managed networks.

If you previously accepted a wrong key, remove it and reconnect:

ssh-keygen -R cornelltilde.com ssh join@cornelltilde.com

What You Need

Your application requires your SSH public key (not your private key). This allows secure passwordless login after approval.

Your account cannot be approved without it.

Check If You Already Have One

Most students already have one. First, check by running:

ls ~/.ssh

If you see files like id_ed25519.pub or id_rsa.pub, you already have a public key.

View and Copy Your Public Key

To view and copy your key:

cat ~/.ssh/id_ed25519.pub

If you only have id_rsa.pub, that works too.

Copy the full line and paste it into the tilde@Cornell application form.

Create a New SSH Key

If you do not already have one, create a modern SSH key with:

ssh-keygen -t ed25519 -C "your_netid@cornell.edu"

Then:

Helpful Documentation

Additional guides:

DigitalOcean: Create SSH Keys with OpenSSH
AWS: Creating SSH Keys on macOS, Linux, and Unix

Apply

Once your SSH public key is ready, return to the join server:

ssh join@cornelltilde.com Password: GO BIG RED