Manage your
SSh Key Life-Cycle

Secure Shell (SSH) offers a secure way for a person or device to gain access to one system (or server) from another. It replaces the standard username and password with a trusted SSH key pair to provide simpler and more secure ongoing access to remote systems. This ongoing access can cover activities like system administration, automated processes, and managing mission-critical network infrastructure. SSH is the de-facto way for administrators to manage UNIX and Linux based operating systems, with enterprises around the world relying on it every day, which makes poorly managed SSH controls a gaping hole in security and business risk of the highest magnitude.

Most SSH deployments use private/public key pairs to authenticate user access. Key pairs are in many senses more secure than passwords, but they open a whole new Pandora’s box to enterprises: key management, the need to control how keys are securely stored and managed, from creation to revocation and deletion. Without proper key management, UNIX and Linux logins in an enterprise go ungoverned, lacking oversight on which key belongs to which identity and if the connections established with the keys comply with company’s policies and guidelines. In practice, this means that an unknown identity may log in to a critical production system with a key that is not even known to exist.
SSH key management is essential to maintaining security since the entire SSH protocol, and therefore the security of it, is built around public and private key pairs. Proper SSH key management protects against critical risks that can lead to system failures or allow important information to fall into the wrong hands.

RCDevs SpanKey is an SSH key life-cycle management solution that makes SSH key-based controls and governance exceptionally easy and effortless, combining them with the existing standard Identity Management solutions. Unlike most SSH key management solutions, SpanKey does not depend on heavy to deploy key vaults, but operates together with a standard LDAP/AD, with user-to-key and key-to-host associations intuitively managed in LDAP/AD accounts and groups. SpanKey provides a centralized and complete SSH key life-cycle management solution with only subtle changes needed to an LDAP/AD.
Voice biometrics is a unique feature by RCDevs which relies on machine learning technologies which
is able to analyze the human voice fingerprints at a cryptographic level.

No more need to manage SSH authorizations by hand or with scripts. User-to-key, key-to-host and key-to-user associations are conveniently managed at the level of LDAP/AD accounts and groups. SpanKey is the only SSH key management solution fully to support organizational hierarchy and controls of LDAP/AD, without added key vaults or third party entitlements engines needed.