|
Secure SSH with WiKID two factor authentication |
 vote
 |
|
SSH offers a highly secure channel for remote administration of servers. However, if you face an audit for regulatory or business requirements, such as Visa/Mastercard PCI, you need to be aware of some potential authentication related short-comings that may cause headaches in an audit. For example: - There is no way to control which users have public key authorization
- There is no way to enforce passphrase complexity (or even be sure that one is being used)
- There is no way to expire a public key
In this document we are going to demonstrate how to combine two-factor authentication from WiKID with an SSH gateway server with hosted private keys to create a highly secure, auditable and easy to use remote access solution.
| | |
| |
|
| | read more | mail this link | score:7100 | -nowen, April 30, 2007 |
| |
|
More Sysadmin articles... |
|
|