Hi, I'm looking for a way to rotate SSH-keys in an infrastructure. I have no experience when it comes to rotating SSH-keys.

Today I use SSH Key-based authentication to authenticate to my servers, tho I have been wondering if I should take a look SSH Certificate-based authentication, or if it is just an "idea" that seems nice.

This is far from a well structured question, but I appreciate anyone who contributes.

Thanks.