SSH access to PKI Hub nodes enforces the password security settings described in this section.

SSH password policy

SSH access supports the Password policy CIS benchmarks.

SSH password storage

SSH never stores passwords in plaintext. A cryptographic key derivation function produces a hash that is stored instead of the original password.

Setting

Value

Algorithm

SHA-512

Iterations 

5,000

Salt size

16 bytes (random per user)