[Yandex Cloud documentation](../../index.md) > [Yandex Identity Hub](../index.md) > [Step-by-step guides](index.md) > Authentication > Deleting an SSH key

# Deleting an SSH key

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Log in to [Yandex Identity Hub](https://center.yandex.cloud/organization) using an administrator or organization owner account.

      [Switch](manage-organizations.md#switch-to-another-org) to an organization or federation of your choice as needed.

  1. In the left-hand panel, select ![icon-users](../../_assets/console-icons/person.svg) **Users**.
 
  1. In the list of users, select the one whose SSH key you want to delete.
  
      Use the filter or search as needed.

  1. Navigate to the **SSH keys** tab.
  1. Click ![image](../../_assets/console-icons/ellipsis.svg) in the SSH key row and select ![image](../../_assets/console-icons/trash-bin.svg) **Delete**.
  1. In the window that opens, confirm deleting the SSH key.

- CLI {#cli}

  If you do not have the Yandex Cloud CLI yet, [install and initialize it](../../cli/quickstart.md#install).

  The folder used by default is the one specified when [creating](../../cli/operations/profile/profile-create.md) the CLI profile. To change the default folder, use the `yc config set folder-id <folder_ID>` command. You can also specify a different folder for any command using `--folder-name` or `--folder-id`. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.

  1. See the description of the CLI command for uploading an SSH key to a user or service account profile:

      ```bash
      yc organization-manager oslogin user-ssh-key delete --help
      ```

  1. Get the ID of the required organization:

      ```bash
      yc organization-manager organization list
      ```

      Result:

      ```text
      +----------------------+-------------------------+-------------------------+
      |          ID          |          NAME           |          TITLE          |
      +----------------------+-------------------------+-------------------------+
      | bpf1smsil5q0******** | sample-organization-1   | My organization         |
      | bpf2c65rqcl8******** | sample-organization-new | New organization        |
      +----------------------+-------------------------+-------------------------+
      ```

  1. Get the SSH key ID by specifying the organization ID you got earlier:

      ```bash
      yc organization-manager user-ssh-key list \
        --organization-id <organization_ID>
      ```

      Result:

     ```text
     +--------------------+-----------------------+----------------------+---------------------+-------------------------------------------+---------------------+---------------------+
     |         ID         |          NAME         |   ORGANIZATION ID    |      SUBJECT ID     |                FINGERPRINT                |      CREATED AT     |      EXPIRES AT     |
     +--------------------+-----------------------+----------------------+---------------------+-------------------------------------------+---------------------+---------------------+
     | bpfh4714g6******** | ssh-key-1756108465588 | bpf2c65rqcl8******** | aje0j5m02ta******** | SHA256:fUKV93PA7HYMZ3Jk6YaVaiK9i+******** | 2025-08-25 07:55:27 |                     |
     | bpf6big3s4******** | My key5               | bpf2c65r3ghy******** | ajei2a73kl3******** | SHA256:EJQdhwWDFj4TebYQzx9CmKZHr5******** | 2024-03-12 18:48:17 | 2024-03-10 21:48:17 |
     +--------------------+-----------------------+----------------------+---------------------+-------------------------------------------+---------------------+---------------------+
     ```

  1. Delete the SSH key of the user or service account:

      ```bash
      yc organization-manager oslogin user-ssh-key delete <SSH_key_ID>
      ```

- Terraform {#tf}

  With [Terraform](https://www.terraform.io/), you can quickly create a cloud infrastructure in Yandex Cloud and manage it using configuration files. These files store the infrastructure description written in HashiCorp Configuration Language (HCL). If you change the configuration files, Terraform automatically detects which part of your configuration is already deployed, and what should be added or removed.
  
  Terraform is distributed under the [Business Source License](https://github.com/hashicorp/terraform/blob/main/LICENSE). The [Yandex Cloud provider for Terraform](https://github.com/yandex-cloud/terraform-provider-yandex) is distributed under the [MPL-2.0](https://www.mozilla.org/en-US/MPL/2.0/) license.
  
  For more information about the provider resources, see the guides on the [Terraform](https://www.terraform.io/docs/providers/yandex/index.html) website or [its mirror](../../terraform/index.md).

  If you do not have Terraform yet, [install it and configure the Yandex Cloud provider](../../tutorials/infrastructure-management/terraform-quickstart.md#install-terraform).
  
  
  To manage infrastructure using Terraform under a service account or user accounts (a Yandex account, a federated account, or a local user), [authenticate](../../terraform/authentication.md) using the appropriate method.

  1. Describe the infrastructure in the configuration file, removing the relevant SSH key:

      ```hcl
      resource "yandex_organizationmanager_user_ssh_key" "my_user_ssh_key" {
        organization_id = "<organization_ID>"
        subject_id      = "<user_ID>"
        data            = "<public_SSH_key>"
        name            = "<key_name>"
        expires_at      = "<key_expiration_date>"
      }
      ```

      Where:

      * `organization_id`: [Organization ID](organization-get-id.md).
      * `subject_id`: ID of the [user](users-get.md) or [service account](../../iam/operations/sa/get-id.md) whose SSH key you are deleting.
      * `data`: Contents of a public SSH key.
      * `name`: Name of the key to delete.
      * `expires_at`: Expiration date of the key to delete.

  1. Delete the resources:

     1. In the terminal, navigate to the configuration file directory.
     1. Make sure the configuration is correct using this command:
     
        ```bash
        terraform validate
        ```
     
        If the configuration is valid, you will get this message:
     
        ```bash
        Success! The configuration is valid.
        ```
     
     1. Run this command:
     
        ```bash
        terraform plan
        ```
     
        You will see a list of resources and their properties. No changes will be made at this step. Terraform will show any errors in the configuration.
     1. Apply the configuration changes:
     
        ```bash
        terraform apply
        ```
     
     1. Type `yes` and press **Enter** to confirm the changes.

     Terraform will delete all the resources as appropriate. You can check the resources for availability in the [Cloud Center UI](https://center.yandex.cloud/organization) or using this [CLI](../../cli/index.md) command:

      ```bash
      yc organization-manager user-ssh-key list \
        --organization-id <organization_ID>
      ```

- API {#api}

  Use the [delete](../api-ref/UserSshKey/delete.md) REST API method for the [UserSshKey](../api-ref/UserSshKey/index.md) resource or the [UserSshKeyService/Delete](../api-ref/grpc/UserSshKey/delete.md) gRPC API call.

{% endlist %}

#### Useful links {#see-also}

* [Adding an SSH key](add-ssh.md)
* [Enabling access via OS Login](os-login-access.md)
* [Creating an OS Login profile](os-login-profile-create.md)
* [Connecting to a VM via OS Login](../../compute/operations/vm-connect/os-login.md)