How do I generate an SSH key in Workday?

Blue Ocean Brain requires key authentication to access the SFTP server set up by BOB. You can generate this key via Workday.

If you're reading this article, you may have an SFTP (Secure File Transfer Protocol) site/server that was set up by BOB or you're in the process of setting up the SFTP server with BOB. The SFTP allows your team to send employee data securely for the creation and maintenance of BOB accounts.

BOB requires key-based authentication for the setup of the SFTP site. To set up the authentication the BOB team will need your ssh key.

If your team has automated the file transfer from Workday, they will need to send the public key used for automation to BOB.

Below are the steps to set up your keys and how to provide them to BOB.

Generate the SSH key

  1. Log into your Workday instance as an Admin and search for the task, “Create x509 Private Key Pair.”
  2. Generate an x509 Private Key Pair. This will generate both a private and a public key.
Note: DO NOT provide your private key to anyone. If someone asks for your key, they are requesting your public key only, never your private key.

Send the public key to BOB

  1. Copy the public portion of the RSA-SSH formatted key. Do not include the comments, (--BEGIN SSH2 Public Key--).
  2. Convert the public key to OpenSSH format (the key will need to start with “ssh-rsa ”).
  3. Save the public SSH key.
  4. Create an encrypted email and send the public SSH key to your BOB IT contact(s).

Once the BOB team confirms that they have added the key on their end, you can then test adding a file to the SFTP site.