web01 / web02

# int-srv
scp /etc/ssl/ssh-CA/ca.pub 10.1.20.31:/etc/ssh
scp /etc/ssl/ssh-CA/ca.pub 10.1.20.32:/etc/ssh

# web01 / web02
vi /etc/ssh/sshd_config

### vi ###
TrustedUserCAKeys /etc/ssh/ca.pub
### vi ###

systemctl restart sshd