Generating SSH CA Certificates Is Now a Dashboard Click Away!
Hey everyone, it's me! Today I found a small but genuinely handy update around SSH authentication, so let me share it.
Cloudflare Changelog
developers.cloudflare.com
What was announced?
According to the Cloudflare Changelog, you can now generate and manage the certificate authority (CA) used by Access for Infrastructure's SSH feature straight from the Cloudflare One dashboard. SSH with Access for Infrastructure uses short-lived SSH certificates to eliminate SSH key management and reduce the security risks that come with lost or stolen keys.
The story so far
Until now, you had to generate this CA certificate by calling the Cloudflare API directly. There was no way to do it purely from the dashboard, which meant you needed to build API requests or write a small script just to get set up.
What changes
With this update, you can create and manage the CA right from the dashboard's Access controls > Service credentials page. Even team members who have never touched the API can now provision an SSH CA with a few clicks, which lowers the barrier to adopting SSH with Access for Infrastructure.
Wrap-up
- Generating the SSH CA is no longer API-only, it now works from the dashboard too
- You'll find it under Access controls > Service credentials in the Cloudflare One dashboard
- Teams can start using short-lived SSH certificates without writing any API code
This is great news for teams already running SSH through Access for Infrastructure, and for anyone considering a move to short-lived SSH certificates.
