ssh-au-method

This command sets the SSH authentication method to establish a CLI session.

Syntax

Authenticate with a signed SSH user certificate.

ssh-au-method certificate

Attempt authentication first with a signed SSH user certificate and, if unsuccessful, with the account password.

ssh-au-method certificate+password

Authentication with the account password.

ssh-au-method password

Reset to default authentication.

no ssh-au-method

Parameters

certificate: Authenticates users by using a signed SSH user certificate.
certificate+password: Authenticates users first by using a signed SSH user certificate. If unsuccessful, prompts for the account password.
password: Authenticates users by prompting for the account password.

Guidelines

The ssh-au-method command sets the SSH authentication method to establish a CLI session.

When no value is provided, the user is prompted for both username and password.
When the value is password, the user is prompted for the password. For this method, the username must be part of the invocation. With the ssh command, the invocation is in the ssh username@host format.
When the value is certificate, the user is not prompted for input. The connection is successful when the invocation provides a signed SSH user certificate that is verified by the CA public key file in the cert: directory on the appliance. With the ssh command, the invocation must include the -i file parameter.
When the value is certificate+password, authentication is attempted with the provided signed SSH user certificate. If unsuccessful, prompts for the password.

When the method includes certificate, use the ssh-ca-pubkey-file command to specify the full path to the CA public key file, and optionally use the ssh-revoked-keys command to revoke user public keys.

When you want to reset to default SSH authentication, use the no ssh-au-method command.