Removing SSH keys

When it becomes necessary to remove an SSH key, you simply locate the public or private key and remove it.

Typically, it is better to rotate keys rather than remove them, unless you have a good reason to do so. However, removing keys is useful in some circumstances such as when you need to remove a private orphaned key in order to remediate a security threat.

In addition, SSH Protect does not allow you to rotate RSA1 keys, since the algorithm has been known to be insecure since 2001. These keys need to be removed and replaced with keys generated with a secure algorithm.

To remove SSH keys

In SSH Protect, navigate to Inventory > SSH Keys and then use filtering to locate the keyset containing the keys that you want to delete.

For more information about filtering the list view, see Finding SSH assets using filters.
In the SSH Keyset Inventory, click the keyset that contains the key you want to remove.
On the Details page of the keyset, select the box next to the key instance(s) that you want to remove.
Click Delete and then click Yes to confirm that you want to delete the selected keys.