---
title: "POST /get-ssh-certificate"
method: POST
path: "/get-ssh-certificate"
tags: ["v2"]
---

# POST /get-ssh-certificate

`POST /get-ssh-certificate`

## Request body

- GetSSHCertificate
  - `cert-issuer-name` string, required — The name of the SSH certificate issuer
  - `cert-username` string, required — The username to sign in the SSH certificate
  - `json` boolean — Set output format to JSON
  - `legacy-signing-alg-name` boolean — Set this option to output legacy ('ssh-rsa-cert-v01@openssh.com') signing algorithm name in the certificate.
  - `public-key-data` string — SSH public key file contents. If this option is used, the certificate will be printed to stdout
  - `token` string — Authentication token (see `/auth` and `/configure`)
  - `ttl` integer — Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
  - `uid-token` string — The universal identity token, Required only for universal_identity authentication

## Response `200`

getSSHCertificateResponse wraps response body.

- GetSSHCertificateOutput
  - `data` string
  - `path` string

## Other responses

- `default` — errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.net/akeyless/apis/akeyless-api.md) · [All operations](https://skmtc.net/akeyless/apis/akeyless-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/akeyless/akeyless-api/versions/0ceb25634501/schema)