Keys

Keys & Certificates

With Mamori's built-in key management you can define or store:

AES keys for symmetric data encryption
RSA key pairs for asymmetric data encryption
SSH private keys for SSH network tunnels and logins
X509 certificates

Click Server Settings

Click Keys & Certificates

The grid shows Key Name, Key Type, Key Usage, and Expires.

You can get the public key or certificate for a key by clicking the button in the grid.

Row actions

Action	Description
Copy public key/cert	Copy material to the clipboard
Edit	Change name, key value, and decryption password (type is read-only)
Manage User Access / Manage Role Access	`KEY USAGE` grants (including time grants via advanced options)
Delete	Remove the key

Symmetric Encryption (AES)

Click

Field Description
Key Name Name passed into encryption functions
Type AES
Key Value Enter key content
Decryption Password Optional

Click OK

Field	Description
Key Name	Name passed into encryption functions
Type	AES
Key Value	Enter key content
Decryption Password	Optional

Asymmetric Encryption (RSA)

Click

Field Description
Key Name Name passed into encryption functions
Type RSA
Method Automatic to generate a pair, or Manual to paste an existing key
Size Defaults to 1024 when generating

Click OK

Field	Description
Key Name	Name passed into encryption functions
Type	RSA
Method	Automatic to generate a pair, or Manual to paste an existing key
Size	Defaults to 1024 when generating

Use the public key to encrypt data and the private key to decrypt.

SSH

Click

Field Description
Key Name Your reference for the key
Type SSH
Method Automatically — create a key pair
Manually — paste an existing key

If Method is Automatically

Field Description
Algorithm RSA, DSA, ECDSA, or ED25519
Size For ECDSA: 256, 384, or 521 (default 384). For RSA / DSA: enter a size (default 2048). ED25519 has no size.

If Method is Manually

Field Description
Key Value PEM or plain text
Decryption Password Required only if the private key is passphrase-protected

Click Create Pair or Create Key

Field	Description
Key Name	Your reference for the key
Type	SSH
Method	Automatically — create a key pair Manually — paste an existing key

Field	Description
Algorithm	RSA, DSA, ECDSA, or ED25519
Size	For ECDSA: 256, 384, or 521 (default 384). For RSA / DSA: enter a size (default 2048). ED25519 has no size.

Field	Description
Key Value	PEM or plain text
Decryption Password	Required only if the private key is passphrase-protected

After the key is created, copy the public key from the grid and add it to the target account’s authorized_keys. Mamori uses the stored private key when connecting.

X509

Click

Field Description
Key Name Your reference for the certificate
Type X509
Key Value PEM certificate material
Decryption Password Optional, if the key material is encrypted

Click OK

Field	Description
Key Name	Your reference for the certificate
Type	X509
Key Value	PEM certificate material
Decryption Password	Optional, if the key material is encrypted

Manual Grant

Find the key in the grid and click

Click Manager Assigned Users or Manager Assigned Roles

For time-limited grants, use advanced options

Click a grantee to add or remove the grant

Portal TLS Certificate for the web/proxy server certificate is a separate menu: TLS Certificate.