PrivX uses short-term credentials to provide just-in-time access to servers.
Access is granted based on the user's role. Provisioned credentials
are created on demand, only valid for a short time, and never stored
to disk.
Improve security
Access to endpoints is provisioned using on-demand short-lived
certificates that are valid for only a few minutes and never written
to disk nor exposed to end-users. This completely eliminates the risk
of credential theft, removing the greatest security risk in privileged
access management.
Reduce costs
PrivX works using existing SSH clients and servers, so there is no
need to add or replace components of the SSH infrastructure. The lack
of dependence on external components translates to minimal disruptions
to network infrastructure, and reduced maintenance costs.
Using short-lifetime access certificates provided by PrivX eliminates
the need for certificate revocation or key rotation.
https://help.ssh.com/support/solutions/articles/36000036925-privx-administrator-manual#idp4
are created on demand, only valid for a short time, and never stored
to disk.
Improve security
Access to endpoints is provisioned using on-demand short-lived
certificates that are valid for only a few minutes and never written
to disk nor exposed to end-users. This completely eliminates the risk
of credential theft, removing the greatest security risk in privileged
access management.
Reduce costs
PrivX works using existing SSH clients and servers, so there is no
need to add or replace components of the SSH infrastructure. The lack
of dependence on external components translates to minimal disruptions
to network infrastructure, and reduced maintenance costs.
Using short-lifetime access certificates provided by PrivX eliminates
the need for certificate revocation or key rotation.
https://help.ssh.com/support/solutions/articles/36000036925-privx-administrator-manual#idp4
Comments
Post a Comment