Command openssh
Palo Alto Networks SSH Manager · vSSH CLI
Inspect the local OpenSSH server trust and check the OpenSSH agent. These commands act on the machine you run them on, not on SSH Manager.
Aliases: o
Persistent flag:
| Flag | Default | Description |
|---|---|---|
--config-file |
platform default | Path to the OpenSSH configuration file to read or edit. |
Subcommands:
Show the current OpenSSH server trust configuration: the config file and its owner, the TrustedUserCAKeys file and the fingerprints of the CA keys it contains, the AuthorizedPrincipals settings, host keys, and host certificates. It also prints warnings, for example if you are not running as root and cannot read every file.
Aliases: s
vssh openssh server showUse this to confirm a host trusts the right CA before and after you change it.
To make a host trust a CA, retrieve the CA key with service ca retrieve and add it to sshd_config. The steps are in Configure OpenSSH server for client authentication and SSH server administration.
Show the status of the OpenSSH authentication agent (whether it is running and reachable).
Aliases: a (for agent), s (for status)
vssh openssh agent statusSee OpenSSH authentication agent for how to start the agent on each platform.