Root ssh:
In: /etc/ssh/sshd_config
Modify PermitRootLogin:
PermitRootLogin without-password

In: /etc/default/login
Comment out the console line which restricts root to login only from /dev/console:
#CONSOLE=/dev/console