If your local client has already been configured, you can create a test certificate by running the step ca certificate command. Here is an example: step...

An Endpoint is an entity (person, device, workload) that is issued a certificate.  Certificate Manager attempts to group certificate renewals for an End...

Yes! Two provisioners are needed: One for OpenVPN server certificates, and one for OpenVPN client certificates. First, the client provisioner. In this ...

Yes! It's not our default encryption setting but we can create an advanced authority that generates RSA certs. Please create a support ticket to create...

Yes! You can set up Single Sign On (SSO) for your team dashboard. Smallstep supports Identity Provider (IdP)-initiated SSO. This feature allows authoriz...

Tokens are designed to be short lived, and in smallstep the longest life for a token is one hour.  Customers needing tokens that live longer than one ho...

Certificates expire and we suggest utilizing short-lived certificates to take full advantage of this security benefit. However, certificates will need to be...

If you’re using the authority-admin provisioner, the default certificate lifetime is 24 hours. The 24-hour default validity window for certificates is arbit...

If your attempts to renew a certificate return errors, it is likely that the certificate has either been revoked or it has expired. In either case, the cert...

Admins (or Administrators) in step-ca are users who are able to modify step-ca configuration. An Admin is the combination of a name (or subject) and a provi...