Discover SSH Host Key

Hi Dario,

You can use the Safeguard PowerShell module with the command below to discover the SSH host key in bulk for a list of Assets:

Invoke-SafeguardAssetSshHostKeyDiscovery -Asset {AssetName} -AcceptSshHostKey

For more information on using Safeguard PowerShell module, please see the link here:

https://github.com/OneIdentity/safeguard-ps

Thanks!

Hello Tawfiq, a doubt occurred to me.
Without using the API, is it possible to set up automatic discovery by configuring Discover SSH keys? (discovery --> SSH Keys)
I have created the discovery, associated the profile (created in SSH Key profiles) and only activated Discover SSH Key.
I have added the assets in profiles --> SSH Key Profiles --> Assets but cannot find any accounts if I click on the Account tab. Why?

Discover SSH keys will not auto discover the Accounts themselves but only the SSH Keys associated with the accounts that already exist in SPP 

Therefore the accounts must exist in SPP under the Assets that have the SSH Key Profile then these accounts will show up in the SSH Key Profile > Accounts tab

Thanks!

Discover SSH keys will not auto discover the Accounts themselves but only the SSH Keys associated with the accounts that already exist in SPP 

Therefore the accounts must exist in SPP under the Assets that have the SSH Key Profile then these accounts will show up in the SSH Key Profile > Accounts tab

Thanks!

great! So i have to see in the ACCOUNTS tab the accounts associated to the linux servers (in Parent column) and a -SSH key profile- with the profile created. Then, i can see all the accounts in the tab in Profiles--> SSH Key Profile section. Everything is right? If yes, i cannot proceed in this way because they have all the accounts in AD (also to access linux resources because they have the SSSD service to have AD manage linux resources) and not created in the linux assets so i have to use API. thank you very much!!! Have a great time

Yes correct, SPP does not currently manage SSH Keys for AD accounts directly against the AD Asset. 

The Linux asset would need to have a Local Linux account (possibly shadowing the AD account) for its SSH Key management against the Linux asset.

Thanks!