SSH key management

SSH authentication requires maintaining the system SSH keys. This can be done as follows:

  • keys create creates a local SSH keyset
  • keys add <host> adds the remote host to the known hosts list allowing outgoing connections
  • keys send <user>@<host> will send the public key from the local SSH keyset to the remote server, thereby enabling remote SSH authentication.

For example, if you wish to perform a backup to a remote host, first create a local key if necessary with keys create. Allow communication with the host using keys add <host>. Send the key to the remote host with keys send <user>@<host>.

The certificates are independent of web servers/proxies.

For more details on SSH key-based authentication, refer to OpenSSH documentation.