...

• client certificate
  • This certificate is stored on the client and is provided to the host during the ssh connection establishment.
  • It is used on the host side to authenticate the clients that try to login.
  • This certificate replaces public key or password based login.
• host certificate
  • This certificate is stored on the host and is provided to the client during the ssh connection establishment.
  • It is used on the client side to authenticate the host that the client tries to login.
  • This certificate replaces the authorized key file entry for a given host.

At the moment we only Here at NetDEF we use the client certificate within NetDEFonly.

5 - Configuration

There are separate pages the guide you through the installation process for the Certificate Authority, the client and the host:

...