Reply to post:

If you don't trust Microsoft and prefer legacy code (How many holes now in Open SSL?!) then you can always use:

Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0

Set-Service -Name sshd -StartupType 'Automatic'