Skip to content
Get in touch

Top 10 Global Bank Starts its Migration to Zero Standing Keyless Access

A security assessment revealed gaps in SSH key discovery and management - the first steps when migrating to keyless access. The bank chose PrivX Key Manager to handle the whole process from key discovery to Zero Standing Access without keys.
Learn more about PrivX Key Manager
large_financial_institution

Customer

  • Top 10 bank in the world with 200k employees

  • Large and complex environment with 60k+ servers

  • Millions of SSH keys across their environment
Powerful quantum-safe security solutions

Challenge: Insufficient SSH key discovery complicated migration
to Zero Trust keyless access

Security gaps

A security assessment revealed security gaps related to SSH keys and potential PAM bypass of their existing PAM solution. The customer saw a clear need to tighten their security posture.

Incomplete SSH key discovery

The customer had an existing SSH key management solution in place, but it had limited capabilities for SSH key discovery across their entire environment.

They needed complete visibility into all their SSH keys, trusts, and connections to be able to start the keyless migration.

Migration to Zero Standing Access

The existing key management solution didn't support migration to Zero Standing Access without vaulting SSH keys, which was one of the customer's requirements.

Additionally, the customer required the migration process to happen without changes to applications.

Solution: From complete SSH trust discovery to Zero Standing Keyless Access without application changes

Full SSH key and trust visibility

The bank deployed PrivX Key Manager to gain full visibility into their SSH keys and trust relationships - mapping keys across servers, users, and systems. They moved from limited visibility to a comprehensive, auditable key inventory and lifecycle management for their SSH key estate.

The first steps of the migration

Full visibility is a crucial first step before the customer can migrate to keyless access - they can't migrate what they can't see.

PrivX Key Manager also enabled automated key management, including key rotation, expiration setup, de-provisioning, and compliance monitoring. Improving the customer's security and compliance posture and reducing their attack surface.

Structured migration path

PrivX Key Manager provides the customer with a structured path from static keys and vaulting to Zero Trust keyless access based on certificates.

The migration doesn't require any changes to applications or scripts, which was one of the customer's main requirements.

Learn how PrivX Key Manager supports the migration to Zero Standing Access without changes to applications or scripts:
Read the solution brief

About PrivX Key Manager
key-skeleton

Discover

PrivX Key Manager discovers and maps all SSH trust relationships and identifies unused, unmanaged, or unauthorized access. It also creates an inventory of such trusts as well as cryptographic assets.

Certification

Audit & comply

Define and implement SSH key policies, including length, expiration, and approved usage types. PrivX Key Manager tracks when and how keys are used - you receive alerts when keys are added, removed, modified, or unauthorized changes are made to SSH configurations.

Priviledged-access-management

Remediate

Identify and remove unused, duplicate, and non-compliant SSH keys through a secure automated workflow. Or update authorizations and renew old and non-compliant keys.

gear-cycle

Manage & automate

A complete view of every SSH key in the environment, including who accessed what, when, and how. Automate SSH key creation, rotation, approval, and retirement within a secure, policy-driven workflow. All from a single central management platform.

Shield

Migrate to keyless SSH access

PrivX Key Manager offers a structured path to just-in-time, certificate-based SSH access - from managing static credentials to centrally controlled, certificate-based, keyless access. No need to vault the private keys first, no need to edit scripts, no need to edit applications.

 

Read the technical data sheet

Learn more about securing access of human and non-human identities with keyless SSH access.