SSH Policy

An SSH Policy configures the SSH service on UCS servers and IMC endpoints, controlling whether SSH is enabled, the listener port, and the idle session timeout.

Location in Intersight GUI: Policies » SSH

Diagram

Classes

policies (compute.intersight.organizations)

Name	Type	Constraint	Mandatory	Default Value
ssh	List	[ssh]	No

ssh (compute.intersight.organizations.policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
description	String		No
managed	Boolean	true, false	No	true
tags	List	[tags]	No
enabled	Boolean	true, false	No	true
port	Integer	min: 1, max: 65535	No	22
timeout	Integer	min: 60, max: 10800	No	1800

tags (compute.intersight.organizations.policies.ssh)

Name	Type	Constraint	Mandatory	Default Value
key	String		Yes
value	String		Yes

Examples

Example-1: Configure an SSH policy with default settings and environment tags.

compute:
  intersight:
    organizations:
      - name: MyOrg
        policies:
          ssh:
            - name: MySshPolicy
              enabled: true
              port: 22
              timeout: 1800
              tags:
                - key: env
                  value: prod

Example-2: Disable SSH access on a policy for locked-down servers.

compute:
  intersight:
    organizations:
      - name: MyOrg
        policies:
          ssh:
            - name: MySshDisabledPolicy
              enabled: false

Example-3: Configure SSH on a non-standard port with a shorter idle timeout.

compute:
  intersight:
    organizations:
      - name: MyOrg
        policies:
          ssh:
            - name: MySshCustomPolicy
              enabled: true
              port: 2222
              timeout: 300