SSH Certificates: a way to scale SSH access
summary
Claims that SSH certificate auth scales SSH access across thousands of servers by using OpenSSH’s CA model, shows exact commands (creates CA with ssh-keygen, copies CA.pub to servers, sets trusted user CA keys in sshd_config, issues short-lived user certs with principals), explains limitations (CA is single point of failure, no instant revocation, require passphrase and rotation) and demos a working setup plus an open source helper called easy-ssh.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 0:30Agenda
- 1:49What is SSH
- 2:27Password authentication
- 3:01Public keybased authentication
- 3:59Alternatives
- 4:11Problems
- 4:41SSS
- 5:00Benefits
- 5:48Who uses it
- 6:18What is a certificate
- 7:36Certificate identity
- 8:17Certificate validity
- 8:56Roles
- 9:25Host
- 9:47Demo
- 10:16Generate SSH Certificate
- 19:45Restart SSH
- 20:06Client side
- 20:33Recap
- 21:09Certificate details
- 21:19Rolebased access
- 24:53MoEngage
related talks
23mAutomation with Scalable & Secure SSH
41mA better way to SSH: Introducing SSH certificates
11mIf You’re Not Using SSH Certificates You’re Doing SSH Wrong
44mEngineering Secure SSH Access for Engineers- 44mEngineering Secure SSH Access for Engineers
32mKeys or Certs for SSH Access? Why should I care?
28mManaging SSH Access without Managing SSH Keys
45mZero Trust SSH