# Teleport's SSH Certificate Authority Pinning for Bootstrapping Trust

DevFeed: [Teleport's SSH Certificate Authority Pinning for Bootstrapping Trust](<https://devfeed.tech/articles/how-to-use-certificate-pinning-to-improve-ux-29864.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/ssh-certificate-authority-pinning/>)

Author: info@goteleport.com (Russell Jones)

Published: 2019-02-26T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [ssh](<https://devfeed.tech/topics/ssh.md>), [trust](<https://devfeed.tech/topics/trust.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [public key](<https://devfeed.tech/topics/public-key.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [kubectl](<https://devfeed.tech/topics/kubectl.md>)

Tags: [cryptography](<https://devfeed.tech/tags/cryptography.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kubectl](<https://devfeed.tech/tags/kubectl.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [trust](<https://devfeed.tech/tags/trust.md>), [x509](<https://devfeed.tech/tags/x509.md>)

## AI overview

This article explains how Teleport nodes authenticate Teleport Auth Servers when the cluster's private certificate authority is not in the node's operating-system trust store. It presents SSH certificate authority pinning as a way to bootstrap trust, drawing inspiration from Kubernetes.

## Source excerpt

An overview of Teleport's SSH certificate authority pinning capability and discussion of how HTTP public key pinning (HPKP) can be used to improve SSH CA user experience.