SSH Secrets Engine
Edit this page on GitHub
The Vault SSH secrets engine provides secure authentication and authorization for access to machines via the SSH protocol. The Vault SSH secrets engine helps manage access to machine infrastructure, providing several ways to issue SSH credentials.
The Vault SSH secrets engine supports the following modes. Each mode is individually documented on its own page.
All guides assume a basic familiarity with the SSH protocol.
Removal of Dynamic Keys feature
Per Vault 1.12's deprecation notice page, the dynamic keys functionality of this engine has been removed in Vault 1.13.
The SSH secrets engine has a full HTTP API. Please see the SSH secrets engine API for more details.