Trust a user CA in sshd_config

sshdconfig

TrustedUserCAKeys /etc/ssh/trusted_user_ca_keys.pub

Explanation

Allow user certificates signed by a trusted CA.

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Same sheet · prioritizing Server Keys and Certificates

Create an Ed25519 host key for sshd.

Open In sheetbashsame section

Create a key pair for signing user certificates.

Open In sheetbashsame section

Create a short-lived user certificate from a CA.

Open In sheetbashsame section

Trust host certificates signed by a CA.

Open In sheettextsame section

Validate sshd_config syntax before restart.

Open In sheetbash2 tag match

Require key-based authentication on the server.

Open In sheetsshdconfig2 tag match