A typical enterprise environment can house well over 1 million SSH user keys - many of which grant high levels of administrative access to a large number of servers. Over time the proliferation of SSH keys – coupled with the fact that the keys are rarely rotated or removed – has created major security risks and compliance issues in many enterprises.

SSH Key Discovery Service is an onsite risk & compliance assessment service delivered by SSH Communications Security, the inventors of the secure shell protocol. Designed to facilitate risk, audit & compliance processes and discover access control related security issues in secure shell environments, SSH Key Discovery Service is an essential first step in asserting control over encrypted networks.

SSH Key Discovery Service Overview:

	Set Up
	IT project planning support and project management Environment configuration & testing Universal SSH Key Manager Discovery Module deployment
	Discovery
	Scan the environment Locate all user keys Discover all trust relationships and authorizations
	Security & Compliance Reporting
	Know who has access to which servers in the environment Report on rogue, orphaned and obsolete keys Identify high level/high risk privileged users (ie. root access) Locate accounts operating outside of security policy (ie. terminated employees) Determine key size, key strength and version of SSH