8.6.3 Configuring Just-in-Time Access for SSH Certificate User

To achieve this requirement, perform the following tasks:

  1. On the home page of Privileged Access Manager console, click Credential Vault.

  2. Click Add +

  3. Select Certificate Issuer > SSH.

  4. In the General page, add the Domain name as SSH Resource and click Next.

  5. Perform one of the following to apply the certificate:

    • If you have the valid CA certificate, to import the certificate perform the following steps:

      1. Click Import.

      2. Specify CA Certificate Name and Passphrase.

    • To create a Certificate Authority, specify the following details:

      1. Certificate Name: Name of the certificate.

        For example, ca-cert

      2. Key Type: Type of public key.

        For example, ed25519

      3. Key Size: Size of the key.

        For example, 256

      NOTE:The certificate and the key are generated with the provided details.

  6. (Optional) add the Extended Attributes.

  7. Add the attributes.

  8. Click Finish.

  9. Go to Credential Vault > Resources > Resource Details, export the certificate from CA Certificate field.

  10. Configure the exported certificate in the target server.