Reference Guide
...
Cloud PAM
Importing Devices from Amazon ...
SSH Key Configuration for AWS Devices
3min
By default, AWS instances are created with an SSH key in the AWS Console Management screen. If devices imported from AWS are configured to log in with an SSH key, Kron PAM can provide a seamless connection to those devices, otherwise, the global username and password need to be defined for each device group.
To use an SSH key for AWS devices:
- Get the SSH key name stored in the device properties of each device:
- Navigate to Devices > Inventory.
- Select the AWS Device and click the Options button. (The SSH Key name of the device is stored in the sshKeyName property)
- Write down the value of this property to be used for the Secrets module.
SSH Key Name
Enable SSH Key Connection to Device Groups:
- Navigate to Devices > Inventory.
- Select the Device Group the AWS devices are imported to and click the Options button.
- Add the addDeviceSshKeyToUserSelection property and set the value as true.
Uploading an SSH key to Kron PAM will enable connections to the device:
- Navigate to Secrets > Vault.
- Fill in the required fields.
- The Account Name field must be exactly equal to the value of the Device Property sshKeyName.
- Select Static SSH Key in the Configuration field.
- Copy the contents of your SSH key into the SSH Key field.
SSH Key in the SAPM
SSH keys must be in an OpenSSH key format. This means that the value put into the Secret Data field should: start with the “---- BEGIN SSH2 PUBLIC KEY ----” and end with the “---- END SSH2 PUBLIC KEY ----” indicators.