---
title: "POST /api/v1/ssh/certificates/issue"
method: POST
path: "/api/v1/ssh/certificates/issue"
tags: ["SSH Certificates"]
---

# POST /api/v1/ssh/certificates/issue

`POST /api/v1/ssh/certificates/issue`

Issue SSH credentials (certificate + key)

## Request body

- object
  - `certificateTemplateId` string, required — The ID of the SSH certificate template to issue the SSH credentials with.
  - `keyAlgorithm` 'RSA_2048' | 'RSA_4096' | 'EC_prime256v1' | 'EC_secp384r1' | 'ED25519' — The type of public key algorithm and size, in bits, of the key pair for the SSH CA.
  - `certType` 'user' | 'host' — The type of certificate to issue. This can be one of user or host.
  - `principals` string[], required — The list of principals (usernames, hostnames) to include in the certificate.
  - `ttl` string — The time to live for the certificate such as 1m, 1h, 1d, ... If not specified, the default TTL for the template will be used.
  - `keyId` string — The key ID to include in the certificate. If not specified, a default key ID will be generated.

## Response `200`

Default Response

- object
  - `serialNumber` string, required — The serial number of the issued SSH certificate.
  - `signedKey` string, required — The SSH certificate or signed SSH public key.
  - `privateKey` string, required — The private key corresponding to the issued SSH certificate.
  - `publicKey` string, required — The public key of the issued SSH certificate.
  - `keyAlgorithm` 'RSA_2048' | 'RSA_4096' | 'EC_prime256v1' | 'EC_secp384r1' | 'ED25519', required — The type of public key algorithm and size, in bits, of the key pair for the SSH CA.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) · [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/53fe4d80973f/schema)