step ssh config configures SSH to be used with certificates. It also supports
flags to inspect the root certificates used to sign the certificates.
This command uses the templates defined in step-certificates to set up user and
Configures a SSH server instead of a client.
The team ID used to bootstrap the environment.
The sub-domain of the certificate authority to bootstrap. E.g., for an authority with
domain name 'certs.example-team.ca.smallstep.com' the value would be 'certs'.
The url step queries to retrieve initial team configuration. Only used with
the --team option. If the url contains <> placeholders, they are replaced with the team ID.
Replacing the authority-id section of the url is not supported with placeholders.
Prints the public keys used to verify user or host certificates.
Prints all the public keys in the federation. These keys are used to verify
user or host certificates
The key=value used as a variable in the templates. Use the flag multiple
times to set multiple variables.
The JSON file with the template data to send to the CA.
Executes the command without changing any file.
Force the overwrite of files without asking.
The certificate authority configuration file. Defaults to
--ca-url=URIURI of the targeted Step Certificate Authority.
The path to the PEM file used as the root certificate authority.
Creates a certificate without contacting the certificate authority. Offline mode
uses the configuration, certificates, and keys created with step ca init,
but can accept a different configuration file using --ca-config flag.
The name of the context for the new authority.
The name that will serve as the profile name for the context.
The name that will serve as the authority name for the context.
Print the public keys used to verify user certificates:
$ stepssh config --roots
Print the public keys used to verify host certificates:
$ stepssh config --host --roots
Apply configuration templates on the user system:
$ stepssh config
Apply configuration templates on a host:
$ stepssh config --host
Apply configuration templates with custom variables: