Getting Started
Deploy Prmana to your first server in under 60 seconds. Replace static SSH keys with hardware-rooted identity evidence.
1. Install the Prmana Engine
Our one-liner installer handles binary deployment, OS-level dependencies, and initial PAM configuration.
curl -sSf https://get.prmana.com | sh
Copy
2. Start the Local Agent
The Prmana Agent manages your hardware-bound keys and DPoP proofs. It should run on your local workstation.
prmana-agent start --yubikey
Copy
Hardware Check: Prmana will automatically detect your Yubikey or TPM. Ensure your device is plugged in or enabled.
3. Authenticate via SSH
Use your standard SSH client. Prmana hooks into the protocol to provide the necessary cryptographic evidence automatically.
ssh [email protected]
Copy
Wait for the flashing light on your hardware, then touch to verify presence.
Verify the Evidence
Check your system logs to see the structured audit trail generated by the Prmana PAM module.
tail -f /var/log/prmana/audit.json