step ssh logout commands removes a key from the ssh-agent.
By default it only removes certificate keys signed by step-certificates, but the
flag --all can be used to remove all keys with a given subject or all keys.
The certificate identity or comment in the key.
Removes all the keys stored in the SSH agent.
The certificate identity. It is usually passed as a positional argument, but a
flag exists so it can be configured in $STEPPATH/config/defaults.json.
Creates a certificate without contacting the certificate authority. Offline mode
uses the configuration, certificates, and keys created with step ca init,
but can accept a different configuration file using --ca-config flag.
The certificate authority configuration file. Defaults to
--ca-url=URIURI of the targeted Step Certificate Authority.
The path to the PEM file used as the root certificate authority.
The context name to apply for the given command.
Remove all identities signed by your SSH CA:
Remove the certificate mariano@work from the SSH agent:
$ stepsshlogout mariano@work
Remove the all the keys and certificates for mariano@work from the SSH agent:
$ stepsshlogout --all mariano@work
Remove the key mariano@work from the agent listening in /tmp/ssh/agent: