SSH access to PKI Hub nodes enforces the password security settings described in this section.
SSH password policy
SSH access supports the Password policy CIS benchmarks.
SSH password storage
SSH never stores passwords in plaintext. A cryptographic key derivation function produces a hash that is stored instead of the original password.
Setting | Value |
|---|---|
Algorithm | SHA-512 |
Iterations | 5,000 |
Salt size | 16 bytes (random per user) |