diff --git a/ssh_pki/.gitignore b/ssh_pki/.gitignore
new file mode 100644
index 0000000..6b76b18
--- /dev/null
+++ b/ssh_pki/.gitignore
@@ -0,0 +1,4 @@
+ca
+client_certs
+host_certs
+
diff --git a/ssh_pki/README.md b/ssh_pki/README.md
new file mode 100644
index 0000000..f760962
--- /dev/null
+++ b/ssh_pki/README.md
@@ -0,0 +1,5 @@
+# ssh_pki
+
+This folder contains files uses to manage SSH certificate authority (CA), so
+handle with care.
+