Ubuntu 22.04 LTS – SSH public key login denied after hardening changes – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Key-based SSH access fails and automation pipelines lose remote management access.

Environment & Reproduction

Typically follows sshd_config hardening edits and permissions changes.

Root Cause Analysis

Invalid SSH directives, disabled auth methods, or wrong ownership/mode on ~/.ssh assets cause rejection.

Quick Triage

Use console access and validate sshd syntax before service restart.

Step-by-Step Diagnosis

Inspect auth logs and effective sshd settings relevant to key authentication.

Solution – Primary Fix

Restore valid key auth directives and strict file permissions, then reload ssh safely.

Solution – Alternative Approaches

Temporarily enable password login from trusted jump hosts only while repairing key-based access.

Verification & Acceptance Criteria

Key login succeeds without fallback prompts and sshd reports clean startup.

Rollback Plan

Restore previous sshd_config backup if modified baseline prevents reliable remote access.

Prevention & Hardening

Apply ssh changes through tested templates and run sshd -t in CI before rollout.

Related Errors & Cross-Refs

Frequently accompanies fail2ban lockouts and cloud-init key overwrite events.

Related tutorial: View the step-by-step tutorial for Ubuntu 22.04 LTS.

View all Ubuntu 22.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

OpenSSH and Ubuntu hardening guidance for secure remote administration.