As per WinSCP documentation, WinScp uses the PuTTy key format, and requires that keys generated by OpenSSH be either converted or we use a /keygen command line switch.

I wanted to use SSH certificates to authenticate the server, to solve scalability issues, but this SSH certificate is generated by OpenSSH ssh-keygen, and I am not sure if certificates generated by this will work fine without issues with WinSCP or WinSCP .NET libraries.

2 Answers 2


OpenSSH certificates is a proprietary non-standard technology.

It was added only recently in PuTTY 0.78 (October 2022).

In WinSCP, it will be available in the upcoming major version.

A related question:
Creating SSH Certificates for SFTP using a CA

  • Alright I see. Guess SSH certs are out of the picture for the moment, since I want to continue using WinSCP. May 20, 2020 at 7:17

a couple of weeks ago a new version of PuTTY was released which supports OpenSSH certificates: https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html WinSCP will hopefully also supporting OpenSSH certificates, but it's not yet the case https://winscp.net/tracker/1873 http://winscp.net/forum/viewtopic.php?t=32793

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.