Signed SSH Certificates - SSH - Secrets Engines | Vault | HashiCorp Developer

The signed SSH certificates is the simplest and most powerful in terms of setup complexity and in terms of being platform agnostic. When using this type, an SSH CA signing key is generated or configured at the secrets engine's mount. This key will be used to sign other SSH keys.