CoreELEC comes with an SSH (Secure Socket Shell) server. In addition to providing strong encryption, SSH is widely used to manage systems and applications remotely, deliver software patches, execute commands or move files.

Factory default software configurations for embedded systems, devices, and appliances often include simple, publicly documented passwords. Attackers can easily identify and access internet-connected systems that share these default passwords.

• select Settings

• select CoreELEC

• select Services
• switch Enable SSH to ON

• open config.ini located on COREELEC partition with a UNIX compatible text editor
• modify the line # coreelec='quiet' by remove the hash # and add ssh like coreelec='quiet ssh'
• save the file and boot the device and SSH should be enabled

The following information is required when using an SSH Client:

SSH Port	The default SSH server port is 22
Username	The default username is root
Password	The default password is coreelec
IP Address	The device IP Address is listed under Connections

For security reasons, it is imperative to change default manufacturer passwords.

Depending on the Operating System of the Client Computer, different SSH clients are used.

• open a terminal

• enter ssh username@coreelec_ip
• enter yes to accept the host key (only has to be done once)
• enter password

ssh root@192.168.0.120

The authenticity of host '192.168.0.120 (192.168.0.120)' can't be established.
ECDSA key fingerprint is SHA256:EJ619NYKeNXoaiGYyJ8y1uITTvLQOdkSNwg9ODjUsFc.

Are you sure you want to continue connecting (yes/no/[fingerprint])?yes

Warning: Permanently added '192.168.0.120' (ECDSA) to the list of known hosts.

root@192.168.0.120's password:
##############################################
#                  CoreELEC                  #
#            https://coreelec.org            #
##############################################

CoreELEC (community): 19.4-Matrix_devel_20211223144345 (Amlogic-ng.arm)
CoreELEC:~ #

• open PuTTY

• enter IP Address
• select Open
• select Yes accept the host key (only has to be done once)
• enter username
• enter password