Apply Admin Workstation configuration

Apply Admin Workstation configuration#

SecureDrop uses authenticated Onion Services as an additional layer of protection for access to the SecureDrop Servers:

  1. The Admin Interface, because it provides access to submissions (although they are encrypted to the Submission Secret Key), and some metadata about sources and submissions.

And, unless SSH-over-Tor is disabled:

  1. SSH on the Application Server

  2. SSH on the Monitor Server

In order to access an authenticated Onion Service, you require its secret key.

The securedrop-admin utility will configure Tor Browser and SSH in sd-admin to provide this secret key automatically, and to set up Qubes Menu shortcuts to access the Admin Interface and open SSH connections to the Application and Monitor Servers.

To perform this configuration open a terminal in sd-admin (Qubes Application menu ▸ sd-admin`` ▸ Xfce Terminal), and run:

securedrop-admin localconfig