Generate a user CA key

bash

ssh-keygen -t ed25519 -f ~/.ssh/ca_user -C 'user CA'

Explanation

Create a key pair for signing user certificates.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Same sheet · prioritizing Server Keys and Certificates

Create a short-lived user certificate from a CA.

Open In sheetbashsame section

Allow user certificates signed by a trusted CA.

Open In sheetsshdconfigsame section

Trust host certificates signed by a CA.

Open In sheettextsame section

Create an Ed25519 host key for sshd.

Open In sheetbashsame section

Validate sshd_config syntax before restart.

Open In sheetbash1 tag match

Require key-based authentication on the server.

Open In sheetsshdconfig1 tag match