OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access.
Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave.
HOW IT WORKS
• Enroll your device by scanning the gateway's QR code.
• When someone requests SSH access, OSH shows you who, what, and where.
• Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave.
• The gateway issues a short-lived certificate — no standing keys, no shared secrets.
WHY IT'S SECURE
• The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone.
• Every approval requires biometric authentication.
• OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs.
FOR TEAMS
• Role-aware: signers, admins, and root see the controls appropriate to them.
• Review access rules, approval history, and gateway logs from the app.
OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.
評分與評論
此App未收到足夠的評分或評論以顯示概況。
Notifications
- One Notifications screen in Admin: how approvers' phones ring, and where your team hears about requests.
- Team channels: add Slack, webhook or Telegram channels from the phone, test them, and sign each change with Face ID.
- Tapping a link in a Slack or Telegram message opens the right screen in the app.
Phone alerts (root)
- Turn on phone alerts through Open Layer's push relay right from the app, without access to the server.
- The status now says whether the gateway is waiting for approval, paused, or removed, and root can withdraw or stop and apply again under another name.
Security
- Every request the app sends to the gateway is signed with a key held on this device.
Fixes
- Fixed crashes when swiping list rows and when editing a notification channel.