I'm not really an expert on different key types but here it goes. My company never really managed keys. We have an SKS server which was setup to manage GPG keys for a couple of users sending encrypted documents. Now a new requirement has come up: all users logging into servers will have to use SSH keys (i.e. ssh-keygen, creating rsa keys) or to use services like git.
My doubts:
- can I manage / does it make sense to manage GPG and SSH keys in the same tool?
- is the existing SKS server the right tool to store these keys? or what is the best tool for the job? looking for opensource/free.
Thanks a lot!