SSH Access

Applies to: all AppWizzy hosted VM projects

AppWizzy supports SSH access for hosted VMs. SSH connects a terminal client to the project VM through an AppWizzy bastion.

The selected template defines the available workspace and permissions. Customer SSH access does not imply unrestricted administrator access.

Before you connect

Confirm these conditions:

  • The VM has finished provisioning.
  • The VM is active and ready.
  • You can open the project settings.
  • Your computer has an SSH client.

A paused VM does not accept SSH connections. Resume the VM before you enable, verify, rotate, or use SSH access.

Enable SSH access

  1. Open the AppWizzy project.
  2. Open Settings or select Configure SSH.
  3. Find SSH Access.
  4. Select Enable SSH Access.
  5. Wait until the status is active.

AppWizzy generates an SSH key and configures access through its bastion. The settings page then shows a private key and SSH command.

Download and use the private key

  1. Download the private key from the SSH Access section.
  2. Move the key to a protected local directory.
  3. Restrict the file permissions.
  4. Copy the SSH command from AppWizzy.
  5. Replace the example key path with the saved path.
  6. Run the command in your terminal.

On Linux and macOS, use this command to restrict the key file:

bash chmod 600 PATH_TO_PRIVATE_KEY

Use the exact SSH host, port, and user that AppWizzy displays. These values route the connection to the correct project VM.

Work inside the project workspace

The SSH session opens the workspace that the selected template supports. The path and available commands can differ between templates.

Files saved in the project workspace remain on the active disk. The same files can appear in other template interfaces.

For example, Codex, Remote Desktop, and SSH can use the same workspace when the template provides those interfaces.

Do not assume that the SSH account has system administrator permissions. Use only the permissions that the project provides.

Verify access

Select Verify Access to run a new AppWizzy connection check. A successful check updates the last verification time.

Verification does not change the private key. Use it when the displayed command stops working or after a VM lifecycle operation.

Rotate access

Select Rotate Access when the private key is lost, exposed, or available to a former collaborator.

Rotation revokes the current key and issues a new key. Download the new key and replace any saved connection command.

The old key cannot connect after successful rotation.

Revoke access

Select Revoke Access when SSH access is no longer required.

Revocation removes the access from the AppWizzy bastion and project VM. The previous command and key stop working.

You can enable a new SSH access after revocation.

Protect the private key

The private key grants project access. Protect it as you protect a password.

  • Do not send it through an untrusted message.
  • Do not commit it to a source repository.
  • Do not store it in the project workspace.
  • Remove copies from computers that no longer need access.
  • Rotate access if you cannot account for every copy.

Resolve common connection problems

If SSH does not connect, complete these checks:

  1. Confirm that the VM is active and ready.
  2. Confirm that SSH status is active.
  3. Use the current command from project settings.
  4. Confirm that the command uses the current private key.
  5. Apply restrictive permissions to the key file.
  6. Select Verify Access.
  7. Rotate access if the current key cannot be trusted.

If verification fails, record the displayed error and contact AppWizzy support. Do not send the private key.