Description
SSH keys can be unlocked during login through a PAM module so later SSH use can behave like single sign-on. It is useful for systems where users need convenient access to encrypted SSH keys after authenticating locally.
PAM authentication modules affect login security and key exposure. Test configuration carefully and protect passphrases, agent behavior, and recovery access.