Ask HN: How do you manage SSH keys and SSL certificates in your company?
I'm the co-founder of a startup that has developed a tool for this called Userify[1].<p>It creates and removes <i>local</i> accounts and manages the ssh keys and sudo permissions centrally, so you don't have to worry about not being able to get in if your LDAP/AD is down. (Our Enterprise edition, self-hosted in your VPC or in your DC, can optionally integrate with LDAP or AD for dashboard logins, MFA, etc.) We also have an AWS server edition in the AWS marketplace. When you remove someone in the dashboard, their account is removed across all of the servers they have access to, <i>and</i> their sessions are terminated, but their home directory is retained for archival or forensics.<p>Our primary foci are paranoid levels of security (hardened, all data encrypted at rest with X25519, in motion with TLS), flexibility, and speed:  fast to deploy or integrate (w/ ansible, chef, puppet, terraform, cloudformation), and fast to install (milliseconds), with both SaaS/Cloud and self-hosted versions and open source python agent (we call it the 'shim').<p>We were founded in 2011 and serve thousands of servers and users in real time; I'm first.last at userify for any questions, and/or info at userify.<p>1. <a href="https://userify.com" rel="nofollow">https://userify.com</a>