Keeping Private SSH Keys Safe
- by Carmen
I have a central server where I stored all the private ssh keys to the different machines that I want to ssh to. Currently, only sysadmins have access to this 'central' server.
Given the above scenario, I like to ask the following questions:
How do you protect your private ssh keys? I read about ssh-agent but I am not sure how to use it or if it can be used in this situation.
If a sysadmin leaves and he copies all the private ssh keys, then he has access to all the servers. How do you deal with this situation?