Wednesday, June 4, 2025
1 change · saas-18.1
Enhancements to existing features
IoT Box images now use a certificate authority approach for SSH access instead of sharing a generated private key. This lets administrators grant access for a limited time by approving a user's public key, reducing the risk of exposing sensitive credentials.
Original PR description
We recently implemented a keypair generation to connect to the IoT Box using SSH. This required users to have the generated private key to connect to the IoT Box. We now generate a certificate authority keypair to allow signing users' public keys in order to grant them access for a specific amount of time, without providing them the IoT Box private key.