How to set up SSH Certificates Template on EJBCA

[techiecircle]

For SSH certificates in EJBCA using the SSH CA functionality. From my understanding, this requires both an End Entity Profile (principals, key ID, options) and a Certificate Profile (type, validity, extensions).
What’s the recommended way to configure templates for user vs host SSH certs?
How do you handle short-lived SSH certs (12–24 hours) in profiles?
Any pitfalls to watch for when linking profiles?
For automation, is REST API preferred over Web Services API?

[mike-agrenius-kushner]

Hi,

SSH is an enterprise feature, so I suggest you go through our support portal, as support here on GitHub is essentially done in our free time =)

When it comes to exact setup though, the world is your oyster – we're a software provider, and generally don't give security recommendations beyond the blaringly obvious – the rest is going to be up to your use case.

Yeah, REST is the recommended way to go forward. While we're not killing the SOAP API, we're not adding anything to it either, so for future-proofing REST is the way to go.

Cheers,
Mike