SSH Key Management Comparison Between UKM and CyberArk

This document is a comparison sheet that outlines the features of two SSH key management solutions: Universal SSH Key Manager (UKM) and CyberArk. It details various aspects of SSH key management, including discovery, policies, product operation, and overall SSH key management capabilities. The sheet indicates which features are supported by each solution, and in cases where functionalities are not supported, the document specifies limitations. Key features compared include user accounts, private SSH keys, authorized keys, key usage inventory, and policies such as key algorithm and size, key age, and orphan keys. Additionally, the document discusses the automation and delegation capabilities of each solution, including the lifecycle management of keys and the ability to provision M2M keys. Observations regarding SSH access management, including Zero Trust principles and ephemeral certificates, are also included. The comparison aims to inform users about the strengths and weaknesses of each solution in managing SSH keys.