Overview of PrivX Key Manager security enforcement
PrivX Key Manager allows organizations to enforce security across their entire corporate ICT environment from one or more centralized locations.
PrivX Key Manager Administrator Manual
website·Indexed 41 days ago
https://pkm.docs.ssh.comDocumentation for managing the PrivX Key Manager system, including the ssh-mgr-client command-line interface, host and key scanning (shell-based and script-based), PostgreSQL database setup, and administration of roles, applications, and audit events.
What's inside PrivX Key Manager
Overview of PrivX Key Manager User Portal capabilities
The PrivX Key Manager User Portal and system allow users to perform Application-Key Signoff, process access requests, and manage the setup and administration of the User Portal itself.Overview of SSL configuration for Key Manager Servers
To enable SSL protection for remote PostgreSQL connections, the following three procedures must be completed:
- Create or obtain the necessary SSL certificates.
- Configure the PostgreSQL database to accept SSL connections from Key Manager Servers.
- Configure the Key Manager Servers to utilize SSL when connecting to the database.
Note: While the documentation provides instructions for self-signed certificates, it is recommended to use certificates from a corporate CA if available. For external CA setup, refer to the official PostgreSQL documentation.
Overview of PrivX Key Manager capabilities
PrivX Key Manager is used for the centralized management of SSH user keys across multi-platform environments. It enables administrators to perform the following tasks:
- SSH Trust Discovery: Identify existing SSH trust relationships without modifying the environment.
- Environment Monitoring: Detect unauthorized key operations, such as manual key setups or removals.
- Lifecycle Management: Automate the setup, renewal, and removal of SSH user keys to maintain control over the environment.
- Centralized Configuration: Deploy and modify SSH software configurations in an automated, centralized manner.
Overview of Key Manager administrative interfaces
Key Manager provides three primary interfaces for performing management actions: the web-based graphical user interface (Key Manager GUI), the Key Manager API, and the Key Manager clients.Overview of the Key Manager API
The Key Manager API enables host and key-management operations via HTTP requests. It is designed to allow administrators to integrate these management operations into automated processes.Overview of PrivX Key Manager for SSH Key Management
PrivX Key Manager is an interoperable and scalable solution designed to manage SSH user keys in enterprise environments. It is used to improve visibility into trust relationships (determining who or what has privileges on a specific computer), automate the manual process of managing keys and authorizations to reduce errors, mitigate the risk of unauthorized internal and external access, and ensure compliance with data-security regulations.Overview of PrivX Key Manager capabilities
PrivX Key Manager is an enterprise SSH user-key management solution designed to discover, manage, and scale SSH user and host-key setups without requiring drastic changes to existing IT infrastructure. It provides centralized administration for trust relationships and automates the distribution, replacement, and removal of keys.Overview of Key Manager Account and Permission Management
Key Manager accounts are used by administrative personnel (Key Manager admins) to access the Key Manager system and perform key management actions on hosts within a managed environment. The system utilizes role-based access management, where account roles and permissions define the specific actions an account is authorized to perform, enabling effective task delegation.Overview of Key Manager auditing, alerting, and reporting
Key Manager provides four primary mechanisms to track the status and security of the managed environment:
- Audit events: Log actions performed by Key Manager administrators.
- Alerts: Identify details or conditions that may compromise the security of the managed environment.
- Reports: Provide high-level summaries and information about the managed environment.
- Watchdog alerts: Trigger notifications in the event of notable internal failures of Key Manager functions.
Overview of Key Manager offline scanning
Offline scanning allows you to gather scan data from target hosts by manually executing the Key Manager host utility on those hosts and then importing the results into the Key Manager system. This is useful for quickly gaining information about hosts before deciding to deploy them to the managed environment. Note that offline scanning only collects data and does not enable management actions on the hosts.Overview of adding hosts to Key Manager management
To monitor and manage keys, hosts must first be deployed under Key Manager management. There are three primary methods for adding hosts: agentless management connections, agent-based management connections, or using offline scans for host discovery only.