diff --git a/roles/fri_base/files/authorized_keys b/roles/fri_base/files/authorized_keys
new file mode 100644
index 0000000..bffc05c
--- /dev/null
+++ b/roles/fri_base/files/authorized_keys
@@ -0,0 +1,4 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM2Tn8+rH+fkFkBycxYrJ7TzhXQhuf3U+w23JFlZoRiX polz@povzpetnik"
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDRpoWIH5u2g12IM39WNRzLsPksfSjfL/82fPnuZwZ7H polz@it-polz"
+ssh-rsa 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 polz@ucilnicenfs-2020
+
diff --git a/roles/fri_base/tasks/main_lin.yml b/roles/fri_base/tasks/main_lin.yml
index 9ada163..e60504a 100644
--- a/roles/fri_base/tasks/main_lin.yml
+++ b/roles/fri_base/tasks/main_lin.yml
@@ -157,3 +157,8 @@
     - /etc/skel/.bashrc
     - /etc/profile
     - /etc/bash.bashrc
+
+- name: Copy authorized_keys
+  copy:
+    src: authorized_keys
+    dest: ~/.ssh/authorized_keys
diff --git a/roles/fri_base/tasks/main_win.yml b/roles/fri_base/tasks/main_win.yml
index 0a68dbd..9e3b5e5 100644
--- a/roles/fri_base/tasks/main_win.yml
+++ b/roles/fri_base/tasks/main_win.yml
@@ -36,5 +36,15 @@
     allow_clobber: true
     state: present
 
+- name: Copy admin ssh keys to authorized_keys
+  win_copy:
+    src: authorized_keys
+    dest: "%USERPROFILE%\\.ssh"
+
+- name: Copy admin keys to administrators_authorized_keys
+  win_copy:
+    src: authorized_keys
+    dest: C:\ProgramData\ssh\administrators_authorized_keys
+
 # TODO: turn on GPO to allow guest SMB logins
 # TODO: open firewall for Samba