Key Totals widget

Several tiles are displayed by default.

• Total Keys- Total number of keys
• Access Orphans - All keys with Client Access Orphan or Root Access Orphan status. For more information, see Client and root access orphans.
• Root Authorizations - All keys with the Root Accessor Root Access Orphan status. For more information, see Remediating root access violations.
• Duplicate Client Private Keys - A duplicate client private key is compliant if the policy setting for Allow Duplicate Private Keys is set to Yes. If the setting is No, then the duplicate private key is non-compliant. One example where this might not be a risk is if a client private key is in multiple places on the same device.
• Duplicate Host Private Keys - A duplicate host private key is compliant if the policy setting for Allow Duplicate Private Keys is set to Yes. If the setting is No, then the duplicate private key is non-compliant.
• SSH-1 Keys - The SSH1 protocol is highly vulnerable and is an extreme risk for organizations that use it. A design flaw in the SSH-1 protocol allows a malicious server to establish two concurrent sessions with the same session ID, allowing a man-in-the-middle attack.
• Key Size < 1024 - Any asymmetric keys using an encryption length that is less that what you have specified in the associated policy. You can configure an account preference to bring keys into compliance with your key length requirements. For more information, see Configuring value thresholds using Account Preferences.
• In Error - All keysets with the Rotation Failed status
• Pending My Approval - Number of keys in a workflow state that requires your action for approval. Approval may be required for certain key actions like provisioning, editing, or deleting a key. For more information, see SSH Keys workflow overview.

1. Click the plus button next to Inventory Totals.

   

2. In Configuration, select the tiles you want to add.

   

3. Click Save.

You can configure these tiles:

• Key size < 1024

• Unused Authorized Keys

See Configuring value thresholds using Account Preferences for information on how to make changes.