SSH Access: IDA → Sozo PC

Connection

Target: sozo@100.83.112.84 (Tailscale IP)
Key: ~/.ssh/id_ed25519_hermes (ED25519)
Port: 22 (OpenSSH for Windows 9.5)

Public Key

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFY/A1gKrG8yNoY20+PNJ9tM22Uv6PMe+6Ku01PvMgcw hermes-agent@IDA

Fingerprint: SHA256:XZaF7OgzkAZ1z7N0AOADyEEAO6BCJHNZ7V2ozQE06SU
Stored on Sozo PC: C:\ProgramData\ssh\administrators_authorized_keys

Connection Command

ssh -i ~/.ssh/id_ed25519_hermes sozo@100.83.112.84

Key Setup History

Generated key pair on IDA PC: ssh-keygen -t ed25519 -C "hermes-agent@IDA" -f ~/.ssh/id_ed25519_hermes -N ""
Appended public key to Sozo PC: C:\ProgramData\ssh\administrators_authorized_keys
Fixed ACL permissions via icacls
Tailscale relay (sin) required — direct connection works after Tailscale restart

Notes

Windows OpenSSH requires administrators_authorized_keys (not user authorized_keys) for admin users
ACL must grant SYSTEM and Administrators read access
Tailscale relay “sin” used for IDA ↔ Sozo PC communication