Episode 96 of Linux Server Admin with Fexingo dives into SSH certificate authentication as a modern alternative to traditional key-based access. Lucas and Luna walk through the practical setup using a custom certificate authority, from generating the CA key pair to signing host and user certificates, configuring sshd, and deploying the trusted CA public key across a small server fleet. They explain why certificate auth eliminates the need for manual authorized_keys management, simplifies onboarding and offboarding, and scales better than SSH keys for teams. The episode includes concrete commands, configuration file snippets, and a discussion of security trade-offs like CA compromise risk and certificate expiration. By the end, listeners understand how to implement SSH certificate authentication on their own Linux servers for more secure and manageable remote access.

#LinuxServerAdmin #SSH #CertificateAuthentication #Security #Sysadmin #Bash #ServerEngineering #Linux #SSHD #PublicKeyInfrastructure #DevOps #Infrastructure #Tech #FexingoBusiness #BusinessPodcast #Technology #ServerManagement #Cryptography

Keep every episode free: buymeacoffee.com/fexingo