Protecting SSH Authentication Materials

• SSH authentication materials are highly valuable

• They must be protected from disclosure

• Files are readily identifiable and searchable

• Some files may be stored on crypto file systems

• Private keys may be stored on smartcards

• Authorized_keys files must be available for login

• Files may be stored on removable storage