Connecting to AWS EC2 from Windows using MobaXterm

This guide provides a step-by-step walkthrough for Windows users to seamlessly connect to an AWS EC2 Linux instance. By leveraging MobaXterm instead of traditional tools like PuTTY, users can avoid tedious key conversions and manage SSH sessions through a unified, developer-friendly interface.

1. The Windows-to-EC2 Connection Challenge

Many developers and systems administrators using Windows find it difficult to establish SSH connections to AWS EC2 instances. Historically, the standard tool for this was PuTTY. However, PuTTY introduces friction because it cannot natively read standard OpenSSH private keys (.pem files) generated by AWS. Users must download an additional utility called PuTTYgen to convert .pem files into PuTTY's proprietary .ppk format.

Because of this complexity, many beginners resort to using the AWS Console-based terminal (EC2 Instance Connect), which is less performant, lacks advanced terminal features, and is tied to a web browser session.

2. Why MobaXterm Over PuTTY?

MobaXterm is an all-in-one terminal application for Windows that provides a much cleaner user experience than PuTTY. It includes an integrated X11 server, tabbed SSH clients, network tools, and a built-in SFTP browser.

Comparison: PuTTY vs. MobaXterm

3. Step-by-Step Connection Flow

The diagram below illustrates how a Windows laptop establishes a secure SSH connection to an EC2 instance hosted in AWS using MobaXterm:

4. Step 1: Launching the EC2 Instance on AWS

To connect to a Linux machine, you must first provision an EC2 instance with the correct network and key pair settings.

1. Log in to the AWS Management Console and navigate to the EC2 Dashboard.
2. Click Launch Instance.
3. Configure Instance Details:
   • Name: Enter a descriptive name (e.g., test windows).
   • Application and OS Image (AMI): Select Ubuntu (or your preferred Linux distribution).
   • Instance Type: Select t2.micro (eligible for the Free Tier).
4. Key Pair Configuration:
   • Click Create new key pair.
   • Key pair name: Enter a name (e.g., windows demo).
   • Key pair type: Select RSA.
   • Private key file format: Select .pem (MobaXterm supports this natively; do not select .ppk).
   • Click Create key pair. The .pem file will automatically download to your local Downloads folder.
5. Network Settings:
   • Ensure Auto-assign public IP is set to Enable.
   • Under firewall rules, check Allow SSH traffic from and select Anywhere (0.0.0.0/0) (or restrict it to your specific IP address for tighter security).
6. Click Launch Instance.

5. Step 2: Downloading and Installing MobaXterm

1. Open your web browser and search for Download MobaXterm.
2. Navigate to the official website and select the Home Edition (Community Edition), which is free for personal and basic professional use.
3. Choose the Installer Edition (recommended over the Portable edition for a cleaner, permanent installation on your system).
4. Locate the downloaded .zip file in your Downloads folder.
5. Right-click the .zip file and select Extract All to extract the contents to a folder.
6. Open the extracted folder, double-click the .msi installer file, and follow the setup wizard:
   • Click Next.
   • Accept the license agreement.
   • Choose the installation path and click Install.
   • Click Finish once the installation is complete.

6. Step 3: Configuring the SSH Session in MobaXterm

Once MobaXterm is installed, launch the application and configure your connection session.

1. Open MobaXterm from your Windows Start Menu.
2. Click on the Session button in the top-left corner of the window.
3. In the session settings window, select SSH as the session type.
4. Configure Basic SSH Settings:
   • Remote host: Paste the Public IPv4 address of your running EC2 instance (copied from the AWS EC2 Console).
   • Specify username: Check this box and enter the default username for your AMI. For Ubuntu, the default username is ubuntu.
   • Port: Keep the default value of 22.

5. Configure Advanced SSH Settings:
   • Click on the Advanced SSH settings tab at the bottom of the session window.
   • Check the box labeled Use private key.
   • Click the file explorer icon next to the input field, navigate to your Downloads folder, and select your downloaded private key file (e.g., windows demo.pem).
6. Click OK to save the session and initiate the connection.

7. Step 4: Establishing the Connection & Verification

1. Upon your first connection attempt, a security warning pop-up will appear asking you to accept the remote host's key fingerprint. Click Accept or Yes.
2. MobaXterm will authenticate using your .pem private key.
3. Once authenticated, you will be greeted by the Ubuntu command-line interface.
4. To verify that your instance is fully operational and has active internet connectivity, run the package index update command:

sudo apt update

Expected Output:

Hit:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu noble InRelease
Get:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu noble-updates InRelease [126 kB]
Get:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu noble-backports InRelease [126 kB]
Get:4 http://security.ubuntu.com/ubuntu noble-security InRelease [126 kB]
Fetched 378 kB in 1s (450 kB/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done

8. Common Pitfalls and Troubleshooting

If you encounter issues connecting to your EC2 instance, review these common failure points:

• Incorrect Default Username: Different Linux distributions use different default usernames. If you are not using Ubuntu, ensure you use the correct username:

  • Ubuntu: ubuntu
  • Amazon Linux 2 / 2023: ec2-user
  • CentOS: centos
  • Debian: admin
  • RHEL: ec2-user or root

• Security Group Rules: Ensure that the Security Group attached to your EC2 instance has an Inbound Rule allowing SSH (Port 22) traffic from your current public IP address or 0.0.0.0/0 (anywhere).

• Missing Public IP: If your EC2 instance was launched in a private subnet without an auto-assigned Public IP, you will not be able to connect to it directly over the public internet. Ensure your instance has a valid Public IPv4 address.

• Running Installer from Inside the Zip: When installing MobaXterm, make sure to extract the .zip file before running the .msi installer. Running the installer directly from inside a compressed folder can cause installation errors due to missing temporary files.

Summary and Key Takeaways

• MobaXterm simplifies Windows SSH workflows by natively supporting standard .pem private keys, eliminating the need for PuTTYgen key conversions.
• The Home (Community) Edition of MobaXterm is free and provides all the essential tools needed for cloud administration, including an integrated SFTP file browser.
• Always use the Installer Edition of MobaXterm for a more stable and integrated desktop experience on Windows.
• EC2 instances require a Public IP and an active Security Group rule allowing inbound traffic on Port 22 to accept SSH connections.
• The default username is AMI-dependent; always verify whether your target OS requires ubuntu, ec2-user, or another default system user.