{"id":49967,"date":"2019-08-14T09:00:19","date_gmt":"2019-08-14T16:00:19","guid":{"rendered":"https:\/\/github.blog\/?p=49967"},"modified":"2022-02-04T10:57:27","modified_gmt":"2022-02-04T18:57:27","slug":"ssh-certificate-authentication-for-github-enterprise-cloud","status":"publish","type":"post","link":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/","title":{"rendered":"SSH certificate authentication for GitHub Enterprise Cloud"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">GitHub Enterprise Cloud now supports SSH certificates to give enterprises and organizations more control over how their members access their repositories. SSH certificates allow one SSH key (a certificate authority) to sign another SSH key, along with information about the developer it belongs to. Admins can upload the public key of their SSH certificate authority (CA) and begin issuing certificates for their members to use for Git authentication. Certificates can only be used for accessing repositories belonging to that enterprise or organization. Additionally, admins can require members to use certificates when accessing their repositories.<\/span><\/p>\n<h2 id=\"how-is-this-different-than-an-ssh-key\"><a class=\"heading-link\" href=\"#how-is-this-different-than-an-ssh-key\">How is this different than an SSH key?<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h2>\n<p><span style=\"font-weight: 400;\">If you\u2019re wondering how an SSH certificate is different than an SSH key you\u2019re not alone. GitHub has supported SSH keys\u2014cryptographic keys that securely identify individual users\u2014from the very beginning. But SSH also<\/span><a href=\"https:\/\/cvsweb.openbsd.org\/src\/usr.bin\/ssh\/PROTOCOL.certkeys?annotate=HEAD\"> <span style=\"font-weight: 400;\">has a specification<\/span><\/a><span style=\"font-weight: 400;\"> that defines support for SSH certificates. SSH certificates allow one SSH key to sign another SSH key, resulting in an \u201cSSH certificate\u201d. A server that trusts the CA is able to verify the certificate\u2019s signature and trust the certificate and its associated metadata.<\/span><\/p>\n<h2 id=\"how-does-it-work\"><a class=\"heading-link\" href=\"#how-does-it-work\">How does it work?<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h2>\n<p><span style=\"font-weight: 400;\">To get a sense for how it all works and gives teams more control, let\u2019s take a look at how an organization would set up their CA before signing keys. The configuration process for enterprises is very similar.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">First, an organization uploads their SSH CA key. This is just a normal SSH key:<\/span><\/p>\n<pre><code class=\"bash\"><span style=\"color: #000000;\">\u279c  ssh-keygen -t ed25519 -C ca@github.com -f ca\n\u279c  cat ca.pub\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOixUTX9ssW7bAaO6wTxXxJGRpVWNnqnOFwFZ1ceOxVn ca@github.com\n<\/span><\/code><\/pre>\n<p><span style=\"font-weight: 400;\">An organization uploads the public key similar to how they would for a user\u2019s normal SSH key. But, instead, they upload the public key to their organization\u2019s \u201cSSH Certificate Authorities\u201d configuration page:<\/span><\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-medium\" src=\"https:\/\/i0.wp.com\/user-images.githubusercontent.com\/1144197\/62983334-3889d780-bdec-11e9-98dd-0523782a0bb9.png?resize=1530%2C732&#038;ssl=1\" width=\"1530\" height=\"732\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Note: Enterprises and organizations can require SSH certificates to access their repositories. This gives admins more control over which keys can be used to access their repositories. Once uploaded, members will have a new section in their SSH key management page to see the enterprises and organizations they belong to that have an SSH CA configured.<\/span><\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" loading=\"lazy\" class=\"alignnone size-medium\" src=\"https:\/\/i0.wp.com\/user-images.githubusercontent.com\/1144197\/62983336-39226e00-bdec-11e9-8146-f128d332f588.png?resize=1528%2C500&#038;ssl=1\" width=\"1528\" height=\"500\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Once an organization has added their SSH CA, they can begin to issue certificates to access the organization&#8217;s repositories. For the sake of simplicity, let\u2019s use a user\u2019s normal SSH key as an example:<\/span><\/p>\n<pre><code class=\"bash\"><span style=\"color: #000000;\">\u279c  ssh-keygen -t ed25519 -C user1@github.com -f user1\n\u279c  cat user1.pub\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGN4i6n6N2jdOXM1RUhLIcww1RnO6QaE3psgUXLewash user1@github.com<\/span><\/code><\/pre>\n<p><span style=\"font-weight: 400;\">This key can now be signed by the SSH CA to create a certificate used to access repositories owned by the organization:<\/span><\/p>\n<pre><code class=\"code-none\"><span style=\"color: #000000;\">\u279c ssh-keygen -O extension:login@github.com=user1 -s ca -V '+1d' -I user1@github.com -n user1 user1.pub\nSigned user key user1-cert.pub: id \"user1@github.com\" serial 0 for user1 valid from 2019-08-09T12:26:00 to 2019-08-10T12:27:43\n<\/span><\/code><\/pre>\n<p><span style=\"font-weight: 400;\">Individual SSH keys no longer need to be uploaded to a developer&#8217;s account to access organization repositories. If an SSH key has been signed by the CA key, the resulting certificate can be used to authenticate access to organization repositories. GitHub identifies the developer accessing the repository based on the \u201c<\/span><a href=\"mailto:login@github.com\"><span style=\"font-weight: 400;\">login@github.com<\/span><\/a><span style=\"font-weight: 400;\">\u201d certificate extension, which must be included.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">SSH certificates allow organizations to maintain sophisticated security policies, such as certificates that expire daily. The certificate we created in our example has an expiration of one day. Organizations can establish highly secure development workflows where, every morning, a developer fetches their daily certificate from a custom internal system or<\/span><a href=\"https:\/\/www.vaultproject.io\/docs\/secrets\/ssh\/signed-ssh-certificates.html\"> <span style=\"font-weight: 400;\">a readily available solution<\/span><\/a><span style=\"font-weight: 400;\"> that is responsible for issuing them. This system can perform whatever authentication abides by the internal authentication requirements of that organization. The resulting certificate can be used to do all of a developer\u2019s work on<\/span><a href=\"http:\/\/github.com\"> <span style=\"font-weight: 400;\">GitHub.com<\/span><\/a><span style=\"font-weight: 400;\"> for the day. And at the end of the day, the certificate automatically expires, and the developer is no longer be able to access any of that organization&#8217;s repositories.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This is a highly requested feature from some of the most security-conscious teams around the world. We\u2019re glad to give them\u2014and all of the teams who use GitHub Enterprise\u2014more ways to keep their code safe. And stay tuned: SSH certificate authentication support for Enterprise Server is coming soon.<\/span><\/p>\n<p><a href=\"https:\/\/help.github.com\/en\/articles\/about-ssh-certificate-authorities\"><span style=\"font-weight: 400;\">Learn more about certificate authentication for GitHub Enterprise<\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.<\/p>\n","protected":false},"author":1353,"featured_media":48359,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_gh_post_show_toc":"no","_gh_post_is_no_robots":"","_gh_post_is_featured":"no","_gh_post_is_excluded":"","_gh_post_is_unlisted":"","_gh_post_related_link_1":"","_gh_post_related_link_2":"","_gh_post_related_link_3":"","_gh_post_sq_img":"","_gh_post_sq_img_id":"","_gh_post_cta_title":"Get free access to GitHub Enterprise","_gh_post_cta_text":"Choose from two trial plans designed to help your business grow.","_gh_post_cta_link":"https:\/\/github.com\/organizations\/enterprise_plan?ref_page=\/blog&ref_cta=Start%20a%20free%20enterprise%20trial&ref_loc=sidebar","_gh_post_cta_button":"Start a free trial","_gh_post_recirc_hide":"","_gh_post_recirc_col_1":"","_gh_post_recirc_col_2":"","_gh_post_recirc_col_3":"","_gh_post_recirc_col_4":"","_featured_video":"","_gh_post_additional_query_params":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"{title}\n\n{excerpt}\n\n{url}","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_wpas_customize_per_network":false,"jetpack_post_was_ever_published":false,"_links_to":"","_links_to_target":""},"categories":[72,3310],"tags":[1941,2025,1899],"coauthors":[2027],"class_list":["post-49967","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-engineering","category-platform-security","tag-authentication","tag-github-enterprise-cloud","tag-ssh"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SSH certificate authentication for GitHub Enterprise Cloud - The GitHub Blog<\/title>\n<meta name=\"description\" content=\"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSH certificate authentication for GitHub Enterprise Cloud\" \/>\n<meta property=\"og:description\" content=\"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-14T16:00:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-02-04T18:57:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630\" \/>\n\t<meta property=\"og:image:width\" content=\"1201\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Ben Toews\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"SSH certificate authentication for GitHub Enterprise Cloud\" \/>\n<meta name=\"twitter:description\" content=\"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Toews\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/\"},\"author\":{\"name\":\"Ben Toews\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/bca579121df32a2fb58ba464dd729937\"},\"headline\":\"SSH certificate authentication for GitHub Enterprise Cloud\",\"datePublished\":\"2019-08-14T16:00:19+00:00\",\"dateModified\":\"2022-02-04T18:57:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/\"},\"wordCount\":641,\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/company-twitter.png?fit=1201%2C630\",\"keywords\":[\"authentication\",\"GitHub Enterprise Cloud\",\"SSH\"],\"articleSection\":[\"Engineering\",\"Platform security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/\",\"name\":\"SSH certificate authentication for GitHub Enterprise Cloud - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/company-twitter.png?fit=1201%2C630\",\"datePublished\":\"2019-08-14T16:00:19+00:00\",\"dateModified\":\"2022-02-04T18:57:27+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/bca579121df32a2fb58ba464dd729937\"},\"description\":\"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/#primaryimage\",\"url\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/company-twitter.png?fit=1201%2C630\",\"contentUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/company-twitter.png?fit=1201%2C630\",\"width\":1201,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/ssh-certificate-authentication-for-github-enterprise-cloud\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Engineering\",\"item\":\"https:\\\/\\\/github.blog\\\/engineering\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Platform security\",\"item\":\"https:\\\/\\\/github.blog\\\/engineering\\\/platform-security\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"SSH certificate authentication for GitHub Enterprise Cloud\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/bca579121df32a2fb58ba464dd729937\",\"name\":\"Ben Toews\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fff3423c5eb9cf0ee9641d6bd6fecf37c280b26e32488ab01d680c182ee56114?s=96&d=mm&r=gacd7ecc342b2835c89851ffbfe836f22\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fff3423c5eb9cf0ee9641d6bd6fecf37c280b26e32488ab01d680c182ee56114?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fff3423c5eb9cf0ee9641d6bd6fecf37c280b26e32488ab01d680c182ee56114?s=96&d=mm&r=g\",\"caption\":\"Ben Toews\"},\"url\":\"https:\\\/\\\/github.blog\\\/author\\\/mastahyeti\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SSH certificate authentication for GitHub Enterprise Cloud - The GitHub Blog","description":"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/","og_locale":"en_US","og_type":"article","og_title":"SSH certificate authentication for GitHub Enterprise Cloud","og_description":"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.","og_url":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/","og_site_name":"The GitHub Blog","article_published_time":"2019-08-14T16:00:19+00:00","article_modified_time":"2022-02-04T18:57:27+00:00","og_image":[{"width":1201,"height":630,"url":"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630","type":"image\/png"}],"author":"Ben Toews","twitter_card":"summary_large_image","twitter_title":"SSH certificate authentication for GitHub Enterprise Cloud","twitter_description":"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.","twitter_image":"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630","twitter_misc":{"Written by":"Ben Toews","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/#article","isPartOf":{"@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/"},"author":{"name":"Ben Toews","@id":"https:\/\/github.blog\/#\/schema\/person\/bca579121df32a2fb58ba464dd729937"},"headline":"SSH certificate authentication for GitHub Enterprise Cloud","datePublished":"2019-08-14T16:00:19+00:00","dateModified":"2022-02-04T18:57:27+00:00","mainEntityOfPage":{"@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/"},"wordCount":641,"image":{"@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630","keywords":["authentication","GitHub Enterprise Cloud","SSH"],"articleSection":["Engineering","Platform security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/","url":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/","name":"SSH certificate authentication for GitHub Enterprise Cloud - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/#primaryimage"},"image":{"@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630","datePublished":"2019-08-14T16:00:19+00:00","dateModified":"2022-02-04T18:57:27+00:00","author":{"@id":"https:\/\/github.blog\/#\/schema\/person\/bca579121df32a2fb58ba464dd729937"},"description":"Enterprise and organization admins can now register their SSH certificate authorities with GitHub, helping their team access repositories over Git using SSH certificates.","breadcrumb":{"@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/#primaryimage","url":"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630","contentUrl":"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630","width":1201,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/engineering\/platform-security\/ssh-certificate-authentication-for-github-enterprise-cloud\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Engineering","item":"https:\/\/github.blog\/engineering\/"},{"@type":"ListItem","position":3,"name":"Platform security","item":"https:\/\/github.blog\/engineering\/platform-security\/"},{"@type":"ListItem","position":4,"name":"SSH certificate authentication for GitHub Enterprise Cloud"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/github.blog\/#\/schema\/person\/bca579121df32a2fb58ba464dd729937","name":"Ben Toews","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fff3423c5eb9cf0ee9641d6bd6fecf37c280b26e32488ab01d680c182ee56114?s=96&d=mm&r=gacd7ecc342b2835c89851ffbfe836f22","url":"https:\/\/secure.gravatar.com\/avatar\/fff3423c5eb9cf0ee9641d6bd6fecf37c280b26e32488ab01d680c182ee56114?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fff3423c5eb9cf0ee9641d6bd6fecf37c280b26e32488ab01d680c182ee56114?s=96&d=mm&r=g","caption":"Ben Toews"},"url":"https:\/\/github.blog\/author\/mastahyeti\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/github.blog\/wp-content\/uploads\/2019\/03\/company-twitter.png?fit=1201%2C630","jetpack_shortlink":"https:\/\/wp.me\/pamS32-cZV","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/49967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/1353"}],"replies":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/comments?post=49967"}],"version-history":[{"count":10,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/49967\/revisions"}],"predecessor-version":[{"id":49977,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/49967\/revisions\/49977"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media\/48359"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=49967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/categories?post=49967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/tags?post=49967"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=49967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}