Our serial console, which gives you SSH access to your server’s console, VNC, and power controls even when its network is down, now runs on a server we built from scratch on OpenBSD 8.0. Your connection to it is now protected with post-quantum SSH.
What’s New
The console server now has an MLDSA44-ED25519 host key alongside its RSA, ECDSA, and Ed25519 keys. Its fingerprint is listed on the Serial Console page so you can verify it on first connect.
Current OpenSSH clients also negotiate a hybrid post-quantum key exchange automatically, which protects your session against traffic recorded today and decrypted later. Older clients continue to connect as before.
Nothing to Change on Your End
You connect to the same hostname, console.cust.arpnetworks.com, with the same username. The existing RSA, ECDSA, and Ed25519 host keys carried over, so your SSH client won’t warn about a changed key. Your SSH keys and serial console password work as they did before.
The one exception is DSA keys, which current OpenSSH no longer supports. If you log in with a DSA key, add an Ed25519 key on the Serial Console page.
Get Started
Open the Serial Console page in the Phoenix dashboard to find your login command, password, and host key fingerprints. New to the serial console? Our serial console guide covers what it can do.