SSH certificates: the better SSH experience
Summary
SSH certificates can dramatically simplify SSH authentication by removing per-host key management and TOFU prompts. The article walks through how to set up a SSH CA, sign user and host keys, deploy certificates, and verify connections, with practical examples and a checklist for admins. It also notes automation options and references tools like Smallstep SSH.