Discover SSH Host Key

Specific question: is it possible to schedule a discovery for SSH Host Key in the web GUI or is it possible to create a script using API to do the discovery of the SSH Host Key of all linux assets?

just the same as selecting a single linux server and running Discover SSH Host Key from the menu but in this way i can do it only for one server linux at time but we need to execute this command for all the linux server automatically for example every day...

  • Hi Dario,

    You can use the Safeguard PowerShell module with the command below to discover the SSH host key in bulk for a list of Assets:

    Invoke-SafeguardAssetSshHostKeyDiscovery -Asset {AssetName} -AcceptSshHostKey

    For more information on using Safeguard PowerShell module, please see the link here:

    https://github.com/OneIdentity/safeguard-ps

    Thanks!

  • Hello Tawfiq, a doubt occurred to me.
    Without using the API, is it possible to set up automatic discovery by configuring Discover SSH keys? (discovery --> SSH Keys)
    I have created the discovery, associated the profile (created in SSH Key profiles) and only activated Discover SSH Key.
    I have added the assets in profiles --> SSH Key Profiles --> Assets but cannot find any accounts if I click on the Account tab. Why?

  • Discover SSH keys will not auto discover the Accounts themselves but only the SSH Keys associated with the accounts that already exist in SPP 

    Therefore the accounts must exist in SPP under the Assets that have the SSH Key Profile then these accounts will show up in the SSH Key Profile > Accounts tab

    Thanks!

  • great! So i have to see in the ACCOUNTS tab the accounts associated to the linux servers (in Parent column) and a -SSH key profile- with the profile created. Then, i can see all the accounts in the tab in Profiles--> SSH Key Profile section. Everything is right? If yes, i cannot proceed in this way because they have all the accounts in AD (also to access linux resources because they have the SSSD service to have AD manage linux resources) and not created in the linux assets so i have to use API. thank you very much!!! Have a great time

  • Yes correct, SPP does not currently manage SSH Keys for AD accounts directly against the AD Asset. 

    The Linux asset would need to have a Local Linux account (possibly shadowing the AD account) for its SSH Key management against the Linux asset.

    Thanks!