https://community.cisco.com/t5/network-access-control/aaa-authorization-ssh-certificate/m-p/3053409#M22739 <P>Silly question, but what exactly does this command do? aaa authorization ssh-certificate</P> <P>I thought it was checking authorization when ssh was used but I think I've misinterpreted. I think it's actually using a certificate to do authorization, and if correct, not sure it's needed. Can anyone explain further and explain if it's commonly used in AAA?</P> Mon, 11 Mar 2019 07:44:26 GMT JESSICA Walsh 2019-03-11T07:44:26Z https://community.cisco.com/t5/network-access-control/aaa-authorization-ssh-certificate/m-p/3053409#M22739 <P>Silly question, but what exactly does this command do? aaa authorization ssh-certificate</P> <P>I thought it was checking authorization when ssh was used but I think I've misinterpreted. I think it's actually using a certificate to do authorization, and if correct, not sure it's needed. Can anyone explain further and explain if it's commonly used in AAA?</P> Mon, 11 Mar 2019 07:44:26 GMT https://community.cisco.com/t5/network-access-control/aaa-authorization-ssh-certificate/m-p/3053409#M22739 JESSICA Walsh 2019-03-11T07:44:26Z https://community.cisco.com/t5/network-access-control/aaa-authorization-ssh-certificate/m-p/3053410#M22742 <P>Using certificate-based authentication/authorization with SSH is still quite uncommon, typically username/passwords or pubkey-authentication is used. One reason is that&nbsp;it's not yet widely supported to use certificates for that task. If used, it could have some benefits as to log on to your session with a smart-card.</P> <P>You probably don't need this configured.</P> Wed, 24 May 2017 15:50:02 GMT https://community.cisco.com/t5/network-access-control/aaa-authorization-ssh-certificate/m-p/3053410#M22742 Karsten Iwen 2017-05-24T15:50:02Z