Manage SSH with HashiCorp Vault

For hands-on interactive labs with Vault, visit HashiCorp Learn → hashi.co/learnvault
HashiCorp Vault is a very powerful tool and can easily be adapted to manage SSH keys, one time passwords, and even run as a CA to sign SSH credentials. This talk will deep dive into the capabilities of Vault with respect to SSH and demo how one time passwords as well as signed SSH keys work. Vault is part of many enterprises full featured secrets management solution and provides a bridge between many layers of the stack and the information security teams. The pluggable nature of Vaults secrets engine and authentication backends make it an attractive offering for enterprises. The SSH one time password capability and the SSH key signing capabilities of Vault are two use cases that have been broadly adopted by many enterprises and this talk will discuss how that is accomplished. It will not necessarily go into the architecture of Vault, but more about building the policies, roles, and credentials associated with these two use cases. Additionally, a demonstration will be shown to provide context around how Vault and SSH can be integrated.
Subscribe to our KZbin channel → kzbin.info?s...
HashiCorp is the leader in multi-cloud infrastructure automation software. The HashiCorp software suite enables organizations to adopt consistent workflows to provision, secure, connect, and run any infrastructure for any application. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, Nomad, Boundary, and Waypoint are downloaded tens of millions of times each year and are broadly adopted by the Global 2000. Enterprise versions of these products enhance the open source tools with features that promote collaboration, operations, governance, and multi-data center functionality.
For more information, visit: www.hashicorp.com or follow us on social media:
Twitter → @hashicorp
LinkedIn → / hashicorp
Facebook → / hashicorp