AZDO.1031 - Validate SSH Key Expiration.

Contributed by Sebastian ClaessonAll contributors →

Overview

Validation of SSH key expiration date should be enabled.

Rationale: Expired SSH keys should not be valid for authentication towards Azure DevOps.

Remediation action

Enable the policy to stop these requests and notifications.

1. Sign in to your organization.
2. Choose Organization settings.
3. Select Policies under Security.
4. Switch the Validate SSH key expiration button to ON.

Results: When active, Azure DevOps enforces that keys with expired expiration dates immediately become invalid for authentication.

Related links

• Learn - SSH key policies
• Learn - My SSH key has expired, what should I do?

Test Metadata

Field	Value
Test ID	AZDO.1031
Severity	High
Suite	Maester
Category	Azure DevOps
PowerShell test	Test-AzdoValidateSshKeyExpiration
Services	AzureDevOps
Learn more	https://learn.microsoft.com/azure/devops/organizations/accounts/change-application-access-policies?view=azure-devops#ssh-key-policies
Tags	AZDO, AZDO.1031

Source

• Test: tests/Maester/AzureDevOps/Test.AZDO.1031.ps1
• Documentation: tests/Maester/AzureDevOps/Test.AZDO.1031.md