diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index e7642433b6..17e6c6dfe9 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -129,6 +129,12 @@ Configuration
   ``rsa-sha2-256-cert-v01@openssh.com``, ``rsa-sha2-512``,
   ``rsa-sha2-512-cert-v01@openssh.com``
 
+.. cfgcmd::set service ssh trusted-user-ca-key ca-certificate <ca_cert_name>
+
+  Specify the name of the CA certificate that will be used to verify the user
+  certificates.
+  You can use it by adding the CA certificate with the PKI command.
+
 Dynamic-protection
 ==================
 Protects host from brute-force attacks against