aaa authorization ssh-certificate

[JESSICA Walsh]

Silly question, but what exactly does this command do? aaa authorization ssh-certificate

I thought it was checking authorization when ssh was used but I think I've misinterpreted. I think it's actually using a certificate to do authorization, and if correct, not sure it's needed. Can anyone explain further and explain if it's commonly used in AAA?

[Karsten Iwen · Accepted solution]

Using certificate-based authentication/authorization with SSH is still quite uncommon, typically username/passwords or pubkey-authentication is used. One reason is that it's not yet widely supported to use certificates for that task. If used, it could have some benefits as to log on to your session with a smart-card.

You probably don't need this configured.