News for hackers. Stuff that matters.

A comment on How to properly manage SSH keys for server access. Parent comment

Re:How to properly manage SSH keys for server access by antoinealb on Sunday September 27, 2020 @05:16AM (#24605312)
A way to work around this is to normally work with short term certificate (24h) and allow your systems people to generate longer term certificates (one month) that are stored encrypted on their laptop or usb key.

That way you get both emergency access in case LDAP is broken, as well as a way to make sure old personal access gets revoked after one month.

[ Parent | on HN ]
Re:How to properly manage SSH keys for server access by _jal on Sunday September 27, 2020 @10:52AM (#24607061)
Yep. I'm a big fan of Hashicorp Vault; that's the next step.

There are of course also DR considerations for that, as always, it is turtles all the way down.

[ Parent | on HN ]