Description of problem: Customer want to increase the security level. Right now satellite is using one (non password protected) ssh key to run remote jobs on all of our hosts. They would like to use password protected ssh key, so even after it is somehow extracted from the satellite, the person would have to know the password to use it. Version-Release number of selected component (if applicable): Satellite 6.10 onward Actual results: existing SSH key do not have passwords to access them Expected results: Password protected SSH key for security reasons. Additional info:
Well, they can do this themselves. They either can replace the key with their own or just add an passphrase to an already existing key.
Is it a future feature though? It is possible manually right now. Yes, we could document it and we could possibly make the installer generate passphrase protected keys, but almost surely not by default.
Sure Adam. I have suggested a way to achieve it to the customer. Please share if you have a document currently or where we can incorporate this?
I don't really have anything. It could either end up being a KCS or go into the proper docs
That should become a new section in https://access.redhat.com/documentation/en-us/red_hat_satellite/6.12/html/managing_hosts/configuring_and_setting_up_remote_jobs_managing-hosts#doc-wrapper