WATCH IT REMOTE SERVER

Generate keys & TLS certificates

Creates an SSH keypair (ed25519) + a self-signed TLS certificate and stores them on disk.

Common Name (CN) Organization Valid (days)

Tip: paste the SSH public key into your cloud so the tunnel user can authenticate.

Registers this PC-A in WATCH IT Cloud and fetches a signed SSH user certificate.

System ID

SYS-

Allowed range: 001 to 1500

System Name API Base Token (optional) Register path Sign path

Notes: the private key stays on this PC. Only the public key is sent to Cloud for signing. The returned certificate is saved as id_ed*-cert.pub.

Files

Generated into app userData folder.

SSH Private Key

—

SSH Public Key

—

SSH Certificate

—

TLS Key

—

TLS Cert

—

Connect to tunnel server (SSH)

Uses your generated SSH private key to authenticate.

Host Port Username Remote bind address (server)

Remote port (fixed) Forward to local host

Forward to local port

Option-B uses a fixed reverse port based on SYS-###. SSH and API requests also use fallback DNS resolution for higher reliability.

Connection details

Live status, fixed reverse port and forward details.

State

—

Fixed reverse port

—

Server host key

—

Forward

—

Heartbeat

Last heartbeat state reported by PC-A.

Heartbeat state

—

Last port

—

Last OK

—

Last error at

—

Last error

—

SSH command preview

Preview of the effective SSH tunnel command.

—

Logs

What the client is doing right now.