Contractor AccessSSHRDP

Controlled Access for Production Contractors

Contractor access should not outlive the work. CertLocker gives teams a practical path for scoped SSH/RDP access with expiry, groups, 2FA, and audit.

Start hosted evaluation Discuss onsite evaluation

The problem this fixes

Vendor keys remain active after the ticket is closed.
Shared VPN or SSH credentials make attribution weak.
Windows RDP access is often tracked separately from Linux SSH.

The CertLocker workflow

1
Create contractor group.
2
Scope hosts and protocol.
3
Set expiry and reason.
4
Require 2FA where appropriate.
5
Review the access trail afterwards.

Operational proof points

Scope

86%

Only approved hosts and protocols.

Expiry

92%

Access ends without a cleanup project.

Audit

84%

Know who accessed what and when.

Hybrid

78%

Linux SSH and Windows RDP in one model.

Built for real support work

Retail, finance, infrastructure, and platform teams all need outside help sometimes. The goal is not to make access impossible. The goal is to make temporary access normal.

Onsite evaluation is the best proof

Contractor access depends on the real network shape: VPNs, jump hosts, Windows boxes, Linux hosts, firewalls, and support habits. A one-month onsite evaluation can prove the workflow against that reality.

Backlinked guides and feature pages

SSH access management

Short-lived SSH access, browser sessions, 2FA, groups, and audit.

Zero-trust SSH use case

A practical model for replacing long-lived PEM files.

Short-lived SSH access with 2FA

How CertLocker handles scoped server access and audit trails.

Production access control guide

The complete access-control model.