Linux Server SSH Certificate Authority for Key Management

Episode 125 of Linux Server Admin with Fexingo dives into SSH certificate authority (SSH CA) as a modern alternative to managing thousands of authorized_keys files. Lucas and Luna walk through the practical setup: creating a CA key pair, signing host and user certificates, and configuring sshd to trust the CA. They discuss why Netflix and other large orgs adopted SSH CA to eliminate key sprawl and simplify onboarding/offboarding. Specific commands like ssh-keygen, ssh-keygen -s, and TrustedUserCAKeys are covered. The episode also touches on certificate expiry as a security boundary and compares SSH CA to traditional public key authentication. If you manage more than a handful of servers, this beats editing authorized_keys by hand.

#SSH #CertificateAuthority #LinuxSecurity #KeyManagement #Sysadmin #DevOps #InfrastructureAsCode #NetflixTech #OpenSSH #LinuxServerAdmin #FexingoBusiness #TechnologyPodcast #ServerSecurity #Automation #SshCA #HostCertificates #UserCertificates #PodcastEpisode125

Keep every episode free: buymeacoffee.com/fexingo