# Installing Privileged Access for SSH

Deploy the Gateway and configure SSH access using the Twingate Terraform provider.

The recommended way to install Privileged Access for SSH is with the [Twingate Terraform provider](https://registry.terraform.io/providers/Twingate/twingate/latest/docs), which publishes complete, runnable examples. Each guide includes the full Terraform configuration, startup scripts, and step-by-step deployment instructions for a specific cloud.

### Prerequisites

- A Twingate account with administrator privileges
- A Remote Network
- The Twingate Client meeting the [minimum version requirements](/content/docs/ssh-privileged-access-overview#client-version/index.html)
- [Terraform](https://developer.hashicorp.com/terraform/install) installed

### Terraform quick-start guides

These guides use a local SSH CA for simplicity, where the Gateway holds the CA private key and signs certificates directly. This is a good way to try out SSH access through the Gateway.

- [Local SSH CA on AWS](https://registry.terraform.io/providers/Twingate/twingate/latest/docs/guides/aws-gateway-ssh-self-signed-guide) — Deploy a Gateway with SSH access on AWS.
- [Local SSH CA on DigitalOcean](https://registry.terraform.io/providers/Twingate/twingate/latest/docs/guides/do-gateway-ssh-self-signed-guide) — Deploy a Gateway with SSH access on DigitalOcean.
- [Local SSH CA on GCE](https://registry.terraform.io/providers/Twingate/twingate/latest/docs/guides/gce-gateway-ssh-self-signed-guide) — Deploy a Gateway with SSH access on Google Compute Engine.

### Vault as SSH CA

For production deployments, the Gateway can use HashiCorp Vault’s SSH secrets engine to sign certificates instead of a local CA. See the [Vault integration guide](https://registry.terraform.io/providers/Twingate/twingate/latest/docs/guides/gce-gateway-ssh-vault-guide) for setup instructions.

### Next steps

After the Gateway is running and your SSH Resources are accessible, see [Remote development with Twingate SSH](/content/docs/ssh-remote-development/index.html) for IDE setup with VS Code, JetBrains Gateway, and Cursor.