---
title: "POST /api/v1/ssh/ca"
method: POST
path: "/api/v1/ssh/ca"
tags: ["SSH Certificate Authorities"]
---

# POST /api/v1/ssh/ca

`POST /api/v1/ssh/ca`

Create SSH CA

## Request body

- object
  - `projectId` string, required — The ID of the project to create the SSH CA in.
  - `friendlyName` string, required — A friendly name for the SSH CA.
  - `keyAlgorithm` 'RSA_2048' | 'RSA_4096' | 'EC_prime256v1' | 'EC_secp384r1' | 'ED25519' — The type of public key algorithm and size, in bits, of the key pair for the SSH CA; required if keySource is internal.
  - `publicKey` string — The public key for the SSH CA key pair; required if keySource is external.
  - `privateKey` string — The private key for the SSH CA key pair; required if keySource is external.
  - `keySource` 'internal' | 'external' — The source of the SSH CA key pair. This can be one of internal or external.

## Response `200`

Default Response

- object
  - `ca` object, required
    - `id` string, uuid, required
    - `projectId` string, required
    - `friendlyName` string, required
    - `status` string, required
    - `keyAlgorithm` string, required
    - `keySource` string, required
    - `publicKey` string, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) · [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/53fe4d80973f/schema)