Ensure SSH key-based authentication is configured for CLI access, preferably sourced from LDAP

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

From the CLI: ; Run the command pureadmin list --publickey to display all users and their public key status. ; Review the output to confirm that all authorized CLI users have a public key configured. ; Test the configuration: Initiate an SSH connection to the array from an administrative workstation using the user's private key to ensure successful authentication.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

To align with the security recommendations, configure SSH public keys for your administrative accounts so they can authenticate securely using a private key rather than a password. From the GUI: ; Navigate to Settings > Access > Users and Policies. ; In the Users panel, click the Edit (three vertical dots) icon for the user you want to modify and select Edit User.... ; In the Edit User pop-up window, select Overwrite and paste the user's SSH public key into the Public Key field. ; Click Save. From the CLI: ; Add a public key: Initiate the configuration for a specific user using the pureadmin setattr command. ; Command Syntax: pureadmin setattr --publickey <USERNAME>