Fortanix DSM SSH CA

Preface

Fortanix Data Security Manager (DSM) SSH CA is part of a broader cryptographic services platform – Fortanix Data Security Manager. It is the most secure SSH CA, as it always runs inside HSM. In addition to the strict security, Fortanix Data Security Manager provides SSH CA with scalability, centralized management, automation and tamper proof audit logs.

Functionality

1. Create SSH CA key for signing user or host SSH keys.

2. Create SSH certificate by signing user’s/host’s SSH public key & related metadata with SSH CA key.

3. Publish the SSH CA public key to remote server, allowing user/host to authenticate to remote server using the SSH certificate.

4. SSH CA is a feature of Fortanix Data Security Manager. Security, management, automation and scalability are provided by the host Fortanix Data Security Manager. That includes broad range of REST APIs in Fortanix Data Security Manager, and the ability to extend and customize the functional- ity with ease by creating and running plugins inside- Data Security Manager. Plugins are Fortanix Data Security Manager’ special feature allowing to create and run custom code inside HSM.

Fortanix Data Security Manager

Fortanix Data Security Manager is an integrated HSM, key management, secret management, and tokenization platform. It is a distributed multi-tenant platform, which can be deployed across multiple locations and scales easily by just adding more nodes to the cluster. Fortanix Data Security Manager is centrally managed, API-based, and features broad range of features, as well as strict RBAC and quorum authentication. It is being used by some of the largest financial services, enterprises, retailers and cloud providers worldwide.