SSH key pair with TACACS account

[Steven Williams]

Can you combine ssh key pair with tacacs user for authentication for routers and firewalls?

[Jaderson Pessoa · Accepted solution]

Hello,

Looks this documentation about: https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/212178-Configuring-SSH-with-x509-authentication.pdf

I hope that it can help you.

Regards,

[Steven Williams]

Ok shows me the answer is yes. I am not really dealing with a PKI though just linux and Mac machines that we need essentially 2 factor authentication on so this is a quick way to rectify that requirement.