Manage customer SSH public keys in PD AWS Lightsail for Blesta
PD AWS Lightsail lets your customers save named SSH public keys for their Linux server. This is useful when a customer wants their own laptop key included in a planned server rebuild. The stored keys apply when the server is built or reinstalled; changing this list does not change access to the running server.
Make SSH-key management available
Open Packages → your package → Module Options. Enable Client: SSH keys and save the settings. Check any service-specific override if an individual customer cannot see the control. This setting lets customers manage their own key list from their service page.
Add a customer's public key
- In the customer area, open the Lightsail service management page and choose the SSH Keys tab.
- Enter an optional descriptive name, such as “Operations laptop”.
- Paste the SSH public key into the public-key box. Use the public key, not its private counterpart.
- Select Add key.
- Check that the new entry appears with the expected name and key preview.
Example: a customer preparing a planned rebuild can save their operations laptop's public key beforehand. The key is then included when the server is rebuilt. Adding it to this list alone does not let that laptop connect to the current server.
Understand the generated server key
The server's generated key is separate from customer-added public keys. Where available, its row offers a download instead of Remove. Customers can use the existing server connection key without adding another public key to this list.
Remove a saved public key
Choose Remove beside a customer-added key and confirm. Check that its entry disappears. This removes it from the set used for a future build or reinstall; it does not revoke access already configured inside the running server. Review that server's SSH access separately when withdrawing someone's current access.
Plan when changes take effect
Reinstalling replaces the server's operating-system disk with a fresh system. Do not reinstall simply to test that a key was saved. Include any required data backup and application recovery in a planned reinstall, and verify SSH access after the new system is ready.
To plan the rest of your offering, see choose which Lightsail controls customers can use.
