POST
/
api
/
v1
/
ssh
/
certificates
/
sign

Body

application/json
certificateTemplateId
string
required

The ID of the SSH certificate template to sign the SSH public key with.

Minimum length: 1
principals
string[]
required

The list of principals (usernames, hostnames) to include in the certificate.

publicKey
string
required

The SSH public key to sign.

certType
enum<string>
default:
user

The type of certificate to issue. This can be one of user or host.

Available options:
user,
host
keyId
string

The key ID to include in the certificate. If not specified, a default key ID will be generated.

Maximum length: 50
ttl
string

The time to live for the certificate such as 1m, 1h, 1d, ... If not specified, the default TTL for the template will be used.

Response

200 - application/json
serialNumber
string
required

The serial number of the issued SSH certificate.

signedKey
string
required

The SSH certificate or signed SSH public key.