Overview

At Pindrop I’ve brought in the awesome tool Rundeck to manage a lot of the day-to-day operational toil I’ve experienced managing servers in things like the large ElasticSearch logging cluster, logstash nodes, ECS nodes and more. Rolling out Rundeck into our PCI Environments lead us to consider security requirements around authentication, which needed to be more than a flat file with user hashes.

Requirements

We discussed the security requirements for a Rundeck server in a PCI Zone, and it had the following needs: