The GET /SSH
The SSH (secure shell) protocol provides for secure connections between computers. It provides several options for authentication, including public key, and protects the communications with strong encryption./Keys/MyKey method is used to retrieve the current user's SSH key generated in Keyfactor Command (see POST SSH Keys My Key). This method returns HTTP 200 OK on a success with the key's details.
Table 647: GET SSH Keys My Key Input Parameters
| Name | In | Description |
|---|---|---|
| includePrivateKey | Query | A Boolean that sets whether to include the private key of the SSH key pair in the response (true) or not (false). If set to true, the x-keyfactor-key-passphrase header must be supplied. The default is false. |
| x-keyfactor-key-passphrase | Header | Required*. A string that sets a password used to secure the private key of the SSH key pair for download. This field is required if IncludePrivateKey is set to true. Tip: This password does not need to match the password entered to secure the private key when the SSH key pair was initially generated. The private key is encrypted at download time and a different password may be used for each download. |
Table 648: GET SSH Keys My Key Response Data
| Name | Description |
|---|---|
| ID | An integer indicating the Keyfactor Command reference ID for the user's SSH key pair. |
| Fingerprint |
A string indicating the fingerprint of the public key. Each SSH public key has a single cryptographic fingerprint that can be used to uniquely identify the key. |
| PublicKey | A string indicating the public key of the key pair. |
| PrivateKey | A string indicating the private key of the key pair. |
| KeyType |
A string indicating the cryptographic algorithm used to generate the SSH key pair. Possible values are:
|
| KeyLength | An integer indicating the key length for the SSH key. The key length supported depends on the key type selected. Keyfactor Command supports 256 bits for Ed25519 and ECDSA and 2048 or 4096 bits for RSA. |
| CreationDate | A string indicating the date, in UTC, on which the SSH key pair was created. |
| StaleDate |
A string indicating the date, in UTC, on which the SSH key pair will be considered to have reached the end of its lifetime. By default, the lifetime of an SSH key pair is 365 days. The SSH lifetime is defined by the Key Lifetime (days) application setting. See in the Keyfactor Command Reference Guide for more information. |
| A string containing the email address of the user who requested the key. This email address is used to alert the user when the key pair is approaching the end of its lifetime. | |
| Comments | An array of strings containing one or more strings with the user-defined descriptive comments, if any, on the key. Although entry of an email address in the comment field of an SSH key is traditional, this is not a required format. The comment may can contain any characters supported for string fields, including spaces and most punctuation marks. Keys created through the Keyfactor Command My SSH Key portal or with the POST /SSH/Keys/MyKey method will contain only one string in the array. |
| LogonCount | An integer indicating the number of Linux logons associated with the SSH key pair. |
A set of functions to allow creation of applications. Keyfactor offers the Keyfactor API, which allows third-party software to integrate with the advanced certificate enrollment and management features of Keyfactor Command. endpoints can be called and results returned. It is intended to be used primarily for validation, testing and workflow A workflow is a series of steps necessary to complete a process. In the context of Keyfactor Command, it refers to the workflow builder, which allows you automate event-driven tasks when a certificate is requested or revoked. development. It also serves secondarily as documentation for the API. The link to the Keyfactor API Reference and Utility is in the dropdown from the help icon (
) at the top of the Management Portal page next to the Log Out button.