Password Vault SSH Key Rotation

even though the passwords for the privileged accounts are changed, rotated, or stored by the password vault module, users who have downloaded rsa private keys for their accounts continue logging in to the systems with these private keys to prevent this, ssh keys can be changed by the password vault module periodically as well to add an ssh key password vault navigate to secrets > vault open the vault tab click on to add button and select add account enter the host, change period , and username select one of the ssh key types as the configuration this action changes the password field to an rsa private key field establish an ssh connection to the target device and copy the contents of the /home// ssh/id rsa file (or any other path that includes the rsa private key for the user) paste the file into the rsa private key field click save the password vault account will be saved and listed in the password vault accounts section from this moment on, if the account type is dynamic, the ssh key will be changed periodically if the account type is static, the ssh key will be unchanged the process of checking out and resetting the ssh key is similar to any other password vault account