Secure shell authentication

1. A method comprising:

receiving at a first information handling system a security challenge;

forwarding the security challenge to a second information handling system;

retrieving by the second information handling system a private key;

producing by the second information handling system by use of the private key a satisfied security challenge;

sending the satisfied security challenge from the second information handling system to the first information handling system; and

establishing a secure shell (SSH) connection between a third information handling system and the first information handling system through use of the satisfied security challenge without the second information handling system divulging the private key, wherein the satisfied security challenge comprises signing the security challenge with the private key and wherein the first information handling system or the second information handling system comprising at least one hardware processor.

2. The method of claim 1 , wherein:

the method further comprises the first information handling system sending to the third information handling system a request to establish an SSH connection and a public key, wherein the public key and the private key form a private/public key Pair;

the receiving comprises receiving the security challenge from the third information handling system in response to sending the request and the public key; and

the establishing the SSH connection comprises establishing the SSH connection between the first information handling system and the third information handling.

3. The method of claim 1 , wherein the producing the satisfied security challenge comprises signing the security challenge with the private key.

4. The method of claim 1 , further comprising authenticating the first information handling system by the second information handling system.

5. The method of claim 1 , wherein the forwarding comprises forwarding the challenge to the second information handling system utilizing Transport Layer Security.

6. The method of claim 1 , wherein network access of the second information handling system is more restricted than network access of the first information handling system according to a policy of an organization controlling the first information handling system and the second information handling system.

7. The method of claim 6 , wherein a firewall governing network access of the second information handling system implements the policy.

8. The method of claim 7 , wherein:

the first information handling system is on a first network;

the second information handling system is on a second network;

the first network is separate from the second network; and

the second network is a segmented network.

9. The method of claim 8 , wherein network access of information handling systems on the second network is limited to information handling systems on the first network.

10. A system of an organization comprising:

a first information handling system to receive a security challenge referring to a public key of a public/private key pair and to forward the security challenge to a second information handling system;

the second information handling system to retrieve from the key store private key of the public/private key pair and to produce a satisfied challenge by use of the private key, wherein the satisfied challenge demonstrates proof of possession of the private key; and

the key store to store the public/private key pair and to provide to the second information handling system the private key, wherein the second information handling system is in a more secure environment than the first information handling system and the system is to establish an SSH connection between a third information handling system and the first information handling system through use of the satisfied security challenge without the second information handling system divulging the private key, wherein the first information handling system or the second information handling system comprising at least one hardware processor.

11. The system of claim 10 , wherein:

the first information handling system is to send to the third information handling system a request to establish an SSH connection and the public key;

the receiving the security challenge comprises receiving the security challenge from the third information handling system in response to sending the request and the public key;

the producing the satisfied security challenge comprises the second information handling system signing the security challenge with the private key; and

the establishing the SSH connection comprises establishing the SSH connection with a fourth information handling system outside the organization by transmitting the signed security challenge to the fourth information handling system.

12. The system of claim 10 , wherein network access of the second information handling system is limited to information handling systems within the organization according to a policy of the organization.

13. The system of claim 10 , further comprising a firewall to implement the policy.

14. The method of claim 3 , further comprising:

transmitting the signed security challenge to the third information handling system; and

the third information handling system decrypting the signed security challenge with the public key.