[ZT] dash instructions for SSH CA (#27513)

* dash instructions for SSH CA

* assume empty state
This commit is contained in:
ranbel 2026-01-08 19:11:20 -05:00 committed by GitHub
parent 4c551406d4
commit ae2093bb2b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 26 additions and 6 deletions

View file

@ -39,16 +39,17 @@ Cloudflare Access will take the identity from a token and, using short-lived cer
## 3. Generate a short-lived certificate public key
1. In [Cloudflare One](https://one.dash.cloudflare.com), go to **Access controls** > **Service credentials**.
1. In [Cloudflare One](https://one.dash.cloudflare.com), go to **Access controls** > **Service credentials** > **SSH**.
2. Go to the **SSH** tab.
2. Select **Add a certificate**.
3. In the **Application** dropdown, choose the Access application that represents your SSH server.
4. Select **Generate certificate**. A row will appear with a public key scoped to your application.
4. Select **Generate certificate**. A new row will appear in the short-lived certificates table with the name of your Access application.
5. Save the key or keep it somewhere convenient for configuring your server.
You can return to copy this public key any time in the Service Auth dashboard.
5. Select the short-lived certificate for your application.
6. Copy its **CA public key**. You can return to copy this public key at any time.
## 4. Save your public key

View file

@ -2,7 +2,23 @@
{}
---
import { Render, Details, APIRequest } from "~/components";
import { Render, Details, APIRequest, Tabs, TabItem } from "~/components";
<Tabs>
<TabItem label="Dashboard">
1. In [Cloudflare One](https://one.dash.cloudflare.com), go to **Access controls** > **Service credentials** > **SSH**.
2. Select **Add a certificate**.
3. Under **SSH with Access for Infrastructure**, select **Generate SSH CA**. A new row will appear in the short-lived certificates table called **SSH with Access for Infrastructure**.
4. Select the **SSH with Access for Infrastructure** certificate.
5. Copy its **CA public key**. You can return to copy this public key at any time.
</TabItem>
<TabItem label="API">
1. [Create an API token](/fundamentals/api/get-started/create-token/) with the following permissions:
@ -25,3 +41,6 @@ import { Render, Details, APIRequest } from "~/components";
/>
4. Copy the `public_key` value returned in the response.
</TabItem>
</Tabs>